rbenavente/Checkov GitHub Action
Run Checkov against Terraform/CloudFormation infrastructure code, as a pre-packaged GitHub Action.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| directory | directory with infrastructure code to scan | no | ./templates |
| check | Run scan only on a specific check identifier (comma separated) | no | — |
| skip_check | Run scan on all checks but a specific check identifier (comma separated) | no | — |
| quiet | display only failed checks | no | — |
| api-key | Environment variable name of the Bridgecrew API key from Bridgecrew app | no | — |
| soft_fail | do not return an error code if there are failed checks | no | — |
| framework | run only on a specific infrastructure | no | — |
| external_checks_dirs | comma separated list of external (custom) checks directories | no | — |
| external_checks_repos | comma separated list of external (custom) checks repositories | no | — |
| output_format | The format of the output. cli, json, junitxml, github_failed_only | no | — |
| download_external_modules | download external terraform modules from public git repositories and terraform registry:true, false | no | — |
| log_level | log level | no | WARNING |
| config_file | checkov configuration file | no | — |
| baseline | Path to a .checkov.baseline file to compare. Report will include only failed checks that are not in the baseline | no | — |
| soft_fail_on | Do not return an error code only for specific check identifiers (comma separated) | no | — |
| hard_fail_on | Return an error code only for specific check identifiers (comma separated) | no | — |
| container_user | Set the username or UID used and optionally the groupname or GID for the action to run under | no | 0 |
Outputs
| name | description |
|---|---|
| results | The results from the infrastructure scan |