bridgecrewio / checkov-vscode

Prevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework, and other infrastructure-as-code-languages with Checkov by Bridgecrew in your VSCODE IDE.
https://marketplace.visualstudio.com/items?itemName=Bridgecrew.checkov
Apache License 2.0
69 stars 37 forks source link

Adding Framework/Skip-Framework functionality #134

Closed billyjbryant closed 1 year ago

billyjbryant commented 1 year ago

In This PR

Pictures/videos

Skip Frameworks

skip-framework

Frameworks

framework

Usage:

[info]: Starting to scan. 
[debug]: Output: 
[info]: repo urlgit@github.com:mapbox/security-breakglass.git 
[info]: repo namemapbox/security-breakglass 
[info]: Running checkov: 
[info]: checkov --output-bc-ids -s --bc-api-key **** --repo-id mapbox/security-breakglass -f "/Users/billybryant/github/mapbox/security-breakglass/.github/workflows/bandit.yml" --skip-check BC_LIC* -o json --framework arm json github_actions cloudformation --skip-framework sca_package secrets sca_image 
[debug]: Checkov scan process exited with code 0 

... SCAN RESULTS ...

fixes #135

mikeurbanski1 commented 1 year ago

Hey @billyjbryant thanks for the contribution! I tested it locally and it looks good.

Can you please make one update to the help text for the setting, for both options? Add the line:

You may need to run the extension command "Clear Checkov results cache" after modifying this setting.

mikeurbanski1 commented 1 year ago

I went ahead and changed it. Merging.