Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Describe the issue
In terraform main.tf of mainatining github repos, I do not have a branch_protection assigned.
module "repository" {
for_each = {
for i, val in local.raw_config.repositories :
val.name => val
}
source = "./modules/repository"
repository = each.value
}
But I actually have an org level branch protection rule (through UI ) which applies to every repo, it is just not in the .tf files.
So I got this CKV2_GIT_1|Ensure each Repository has branch protection associated issues while scanning. error when checkov scanning.
I wonder except adding skip_check: CKV2_GIT_1 as the running option, is there any alternative way for me to make it work?
Examples
Please share an example code sample (in the IaC of your choice) + the expected outcomes.
Version (please complete the following information):
Checkov Version bridgecrewio/checkov-action@v12
Additional context
Add any other context about the problem here.
Describe the issue In terraform main.tf of mainatining github repos, I do not have a branch_protection assigned.
But I actually have an org level branch protection rule (through UI ) which applies to every repo, it is just not in the .tf files. So I got this
CKV2_GIT_1|Ensure each Repository has branch protection associated issues while scanning.
error when checkov scanning.I wonder except adding
skip_check: CKV2_GIT_1
as the running option, is there any alternative way for me to make it work?Examples
Please share an example code sample (in the IaC of your choice) + the expected outcomes.
Version (please complete the following information):
Additional context Add any other context about the problem here.