Pin CI checkov check to latest checkov release (v2.3.194)
Context for reviewers
Testing instructions, background context, more in-depth details of the implementation, and anything else you'd like to call out or ask reviewers. Explain how the changes were verified.
Right now we’re doing infra checks against checkov@main and it’s a little bit chaos because every PR has a chance of randomly failing against brand new checkov checks. This PR pins to a specific version and https://wicmtdp.atlassian.net/browse/PRP-287 will handle updating to a future latest version.
Latest matching release version of checkov-action is v12.2296.0
Testing
Screenshots, GIF demos, code examples or output to help show the changes working as expected. ProTip: you can drag and drop or paste images into this textbox.
Ticket
https://wicmtdp.atlassian.net/browse/PRP-286
Changes
Context for reviewers
Right now we’re doing infra checks against checkov@main and it’s a little bit chaos because every PR has a chance of randomly failing against brand new checkov checks. This PR pins to a specific version and https://wicmtdp.atlassian.net/browse/PRP-287 will handle updating to a future latest version.
There is currently no way to specify the checkov version to the checkov-action. See open issue: https://github.com/bridgecrewio/checkov-action/issues/41
So, instead, this PR pins to:
Testing
See passing CI check at: https://github.com/navapbc/wic-participant-recertification-portal/actions/runs/4789903100/jobs/8518320846?pr=67