fix(kubernetes): fix in CPURequests check

checkov/kubernetes/checks/resource/k8s/CPURequests.py

@@ -15,6 +15,8 @@ def scan_container_conf(self, metadata: Dict[str, Any], conf: Dict[str, Any]) ->
         self.evaluated_container_keys = ["resources/requests/cpu"]
         res = conf.get("resources")
         if res:
+            if not isinstance(res, dict):
+                return CheckResult.UNKNOWN
             requests = res.get("requests")
             if requests and requests.get("cpu"):
                 return CheckResult.PASSED

tests/kubernetes/checks/example_Requests_Limits/pod-requests-limits-UNKNOWN.yaml

@@ -0,0 +1,20 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: frontend
+spec:
+  containers:
+  - name: db
+    image: mysql
+    env:
+    - name: MYSQL_ROOT_PASSWORD
+      value: "password"
+    resources:
+      - requests:
+          memory: "64Mi"
+          cpu: "250m"
+          ephemeral-storage: "2Gi"
+        limits:
+          memory: "128Mi"
+          cpu: "500m"
+          ephemeral-storage: "4Gi"

tests/kubernetes/checks/test_CPURequests.py

@@ -13,7 +13,7 @@ def test_summary(self):
         current_dir = os.path.dirname(os.path.realpath(__file__))
 
         test_files_dir = current_dir + "/example_Requests_Limits"
-        report = runner.run(root_folder=test_files_dir,runner_filter=RunnerFilter(checks=[check.id]))
+        report = runner.run(root_folder=test_files_dir, runner_filter=RunnerFilter(checks=[check.id]))
         summary = report.get_summary()
 
         self.assertEqual(summary['passed'], 1)