search

bridgecrewio / checkov-action

This GitHub Action runs Checkov against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues.
Apache License 2.0
238 stars 100 forks source link

Feature request: Integration with Reviewdog #14

Open mdesmarest opened 4 years ago

mdesmarest commented 4 years ago

Please integrate Checkov with Reviewdog below, they host a template to make it easy to host the action. Using a tool like this allows you to run checks against changes as the workflow action runs on pull requests and will allow issues to be address and resolved on the entirety of the repository separately. Without this pull requests may fail for errors not relates to changes that are being pushed.

https://github.com/reviewdog/reviewdog

https://github.com/reviewdog/action-template

also please allow these flags as this makes it easier to centralize rules within one repo and allows for deployment to workflows without having to update yaml files. It would great to reference a set folder of static rules via the --external-checks-dir and bypass the main scan all together.

--external-checks-git

--external-checks-dir

MPV commented 3 years ago

Sounds like #15 and #16 describes these changes too (but more general and specific to Reviewdog).

Waban-smile commented 3 years ago

Hello there,

Reviewdog integration could be great as it provides a better integration with the GitHub PR interface and checks. I'm sorry I don't have spare time to implement this right now, but shouldn't be that hard using the templates provided by Reviewdog

Have a nice day and ty for this great tool =)

rusherr02 commented 1 year ago

Is this done?

MPV commented 11 months ago

Could it be an idea for Bridgecrew to adopt @ishii1648's https://github.com/ishii1648/action-checkov-reviewdog?