|
27 | 27 | id: checkov |
28 | 28 | uses: bridgecrewio/checkov-action@v12 |
29 | 29 | with: |
30 | | - directory: EventHubs/src/ |
31 | | - file: EventHubs/src/azuredeploy_metrics.json # optional: provide the path for resource to be scanned. This will override the directory if both are provided. |
32 | | - #check: CKV_AWS_1 # optional: run only a specific check_id. can be comma separated list |
33 | | - #skip_check: CKV_AWS_2 # optional: skip a specific check_id. can be comma separated list |
34 | | - quiet: false # optional: display only failed checks |
35 | | - # soft_fail: true # optional: do not return an error code if there are failed checks |
36 | | - framework: arm # optional: run only on a specific infrastructure {cloudformation,terraform,kubernetes,all} |
37 | | - #skip_framework: terraform # optional: skip a specific infrastructure {cloudformation,terraform,kubernetes,all} |
38 | | - #skip_cve_package: CVE_2019_8331 # optional: skip a specific CVE package in SCA scans, can be comma separated list |
39 | | - output_format: cli,json # optional: the output format, one of: cli, json, junitxml, github_failed_only, or sarif. Default: sarif |
40 | | - #output_file_path: reports/results.sarif # folder and name of results file |
41 | | - output_bc_ids: true # optional: output Bridgecrew platform IDs instead of checkov IDs |
42 | | - #download_external_modules: true # optional: download external terraform modules from public git repositories and terraform registry |
43 | | - #repo_root_for_plan_enrichment: example/ #optional: Directory containing the hcl code used to generate a given terraform plan file. Use together with `file` |
44 | | - #var_file: ./testdir/gocd.yaml # optional: variable files to load in addition to the default files. Currently only supported for source Terraform and Helm chart scans. |
45 | | - # log_level: DEBUG # optional: set log level. Default WARNING |
46 | | - #config_file: path/this_file |
47 | | - #baseline: cloudformation/.checkov.baseline # optional: Path to a generated baseline file. Will only report results not in the baseline. |
48 | | - #container_user: 1000 # optional: Define what UID and / or what GID to run the container under to prevent permission issues |
49 | | - #use_enforcement_rules: true # optional - use enforcement rule configs from the platform |
| 30 | + file: EventHubs/src/azuredeploy_metrics.json |
| 31 | + skip_check: CKV_AZURE_16,CKV_AZURE_17,CKV_AZURE_35 |
| 32 | + quiet: false |
| 33 | + framework: arm |
| 34 | + output_format: cli |
| 35 | + output_bc_ids: true |
0 commit comments