fulgas/Run Checkov with reviewdog
A GitHub Action that runs [Checkov](https://www.checkov.io/) for Infrastructure as Code (IaC) security scanning and reports results to pull requests using [reviewdog](https://github.com/reviewdog/reviewdog).
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| github_token | GITHUB_TOKEN | yes | ${{ github.token }} |
| tool_name | Tool name to use for reviewdog reporter | yes | reviewdog-action-checkov |
| level | Report level for reviewdog [info,warning,error] | no | error |
| reporter | Reporter of reviewdog command [github-pr-check,github-pr-review,github-check] | no | github-pr-check |
| filter_mode | Filtering mode for reviewdog [added,diff_context,file,nofilter] | no | added |
| fail_level | If set to none, always use exit code 0. Otherwise fail if findings >= level | no | error |
| working_directory | Directory to run the action from | no | . |
| target_dir | Target directory for Checkov to scan | no | . |
| skip_check | Space-separated list of Checkov checks to skip (e.g., CKV_AWS_1 CKV_AWS_2) | no | "" |
| framework | Comma-separated list of frameworks to scan (e.g., terraform,kubernetes) | no | "" |
| flags | Additional flags to pass to Checkov | no | "" |
Outputs
| name | description |
|---|---|
| checkov-return-code | Checkov command return code |
| reviewdog-return-code | reviewdog command return code |