Add support for skip-path about checkov-action HOT 4 CLOSED

Hey @HariSekhon, that's a nice pattern! Thanks for sharing! :-)

from checkov-action.

Use skip-path in .checkov.yaml - see my Templates repo for a working example that I use to skip scanning sub-modules:

https://github.com/HariSekhon/Templates/blob/master/.checkov.yaml

from checkov-action.

Hey @HariSekhon , thanks for your suggestion. I was hoping to set skip-path in the github action, instead of .checkov.yaml.

Cheers

from checkov-action.

Yes I completely understand that - you should be able to do both.

What I find is beneficial with the .checkov.yaml is that this use a single GitHub Actions reusable workflow across all repos, eg:

https://github.com/HariSekhon/GitHub-Actions/blob/master/.github/workflows/checkov.yaml

which can be imported in each repo with a few lines:

jobs:
  checkov:
    uses: HariSekhon/GitHub-Actions/.github/workflows/checkov.yaml@master

(eg. https://github.com/HariSekhon/Terraform/blob/master/.github/workflows/checkov.yaml)

but configure different settings in each repo's .checkov.yaml, allowing for the greatest code reuse and settings flexibility combination.

from checkov-action.