2023-12-22 07:22:15 -05:00
|
|
|
---
|
|
|
|
# Options reference: https://www.checkov.io/2.Basics/CLI%20Command%20Reference.html
|
|
|
|
|
2024-01-30 14:24:55 -05:00
|
|
|
directory:
|
|
|
|
- test/linters/checkov/good
|
|
|
|
|
2023-12-22 07:22:15 -05:00
|
|
|
quiet: false
|
2024-06-27 13:03:16 -04:00
|
|
|
|
|
|
|
skip-framework:
|
|
|
|
# The Kubernetes framework because it doesn't run Kustomize before running the
|
|
|
|
# scan, as expected. There's the Kustomize framework for that.
|
|
|
|
# If we don't skip the Kubernetes framework, Checkov reports issues against
|
|
|
|
# Kubernetes descriptors that we handle with Kustomize. For example, we set
|
|
|
|
# a non-default Kubernetes Namespace using Kustomize.
|
|
|
|
# Checkov doesn't currently support skipping checks only for a given set of
|
|
|
|
# frameworks, and the Kubernetes framework runs the same checks that the Helm
|
|
|
|
# and the Kustomize frameworks run. So, we skip the Kubernetes framework when
|
|
|
|
# running test cases. In case we need to implement new Kubernetes test cases,
|
|
|
|
# we have to do that as part of the test Helm chart or the test Kustomize
|
|
|
|
# "package".
|
|
|
|
- kubernetes
|
2023-12-22 07:22:15 -05:00
|
|
|
...
|