#checkov:skip=CKV_AWS_26: it's part of the testing routine so doesn't require the check #284

SteveLinden · 2023-10-16T06:58:19Z

#checkov:skip=CKV_AWS_26: This has been reported as it's part of the testing routine so doesn't require the check really. It just picks up a JSON routine as a policy.

github-actions · 2023-10-16T07:01:47Z

`TFSEC Scan` Success

Show Output

*****************************

TFSEC will check the following folders:
.

*****************************

Running TFSEC in .
Excluding the following checks: AWS089, AWS099, AWS009, AWS097, AWS018

======================================================
tfsec is joining the Trivy family

tfsec will continue to remain available 
for the time being, although our engineering 
attention will be directed at Trivy going forward.

You can read more here: 
https://github.com/aquasecurity/tfsec/discussions/1994
======================================================
  timings
  ──────────────────────────────────────────
  disk i/o             203.214µs
  parsing              17.389973ms
  adaptation           322.42µs
  checks               22.414284ms
  total                40.329891ms

  counts
  ──────────────────────────────────────────
  modules downloaded   0
  modules processed    1
  blocks processed     48
  files read           4

  results
  ──────────────────────────────────────────
  passed               6
  ignored              4
  critical             0
  high                 0
  medium               0
  low                  0


No problems detected!

tfsec_exitcode=0

`Checkov Scan` Failed

Show Output

*****************************

Checkov will check the following folders:
.

*****************************

Running Checkov in .
Excluding the following checks: CKV_GIT_1
terraform scan results:

Passed checks: 139, Failed checks: 0, Skipped checks: 31

github_actions scan results:

Passed checks: 175, Failed checks: 1, Skipped checks: 0

Check: CKV2_GHA_1: "Ensure top-level permissions are not set to write-all"
	FAILED for resource: on(Generate Terraform README docs)
	File: /.github/workflows/documentation.yml:0-1

checkov_exitcode=1

`CTFLint Scan` Success

Show Output

*****************************

Setting default tflint config...
Running tflint --init...
Installing `terraform` plugin...
Installed `terraform` (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.2.1)
tflint will check the following folders:
.

*****************************

Running tflint in .
tflint_exitcode=0

github-actions · 2023-10-16T07:06:59Z

`TFSEC Scan` Success

Show Output

*****************************

TFSEC will check the following folders:
.

*****************************

Running TFSEC in .
Excluding the following checks: AWS089, AWS099, AWS009, AWS097, AWS018

======================================================
tfsec is joining the Trivy family

tfsec will continue to remain available 
for the time being, although our engineering 
attention will be directed at Trivy going forward.

You can read more here: 
https://github.com/aquasecurity/tfsec/discussions/1994
======================================================
  timings
  ──────────────────────────────────────────
  disk i/o             4.244362ms
  parsing              14.454212ms
  adaptation           240.004µs
  checks               8.590425ms
  total                27.529003ms

  counts
  ──────────────────────────────────────────
  modules downloaded   0
  modules processed    1
  blocks processed     48
  files read           4

  results
  ──────────────────────────────────────────
  passed               6
  ignored              4
  critical             0
  high                 0
  medium               0
  low                  0


No problems detected!

tfsec_exitcode=0

`Checkov Scan` Failed

Show Output

*****************************

Checkov will check the following folders:
.

*****************************

Running Checkov in .
Excluding the following checks: CKV_GIT_1
terraform scan results:

Passed checks: 139, Failed checks: 0, Skipped checks: 31

github_actions scan results:

Passed checks: 175, Failed checks: 1, Skipped checks: 0

Check: CKV2_GHA_1: "Ensure top-level permissions are not set to write-all"
	FAILED for resource: on(Generate Terraform README docs)
	File: /.github/workflows/documentation.yml:0-1

checkov_exitcode=1

`CTFLint Scan` Success

Show Output

*****************************

Setting default tflint config...
Running tflint --init...
Installing `terraform` plugin...
Installed `terraform` (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.2.1)
tflint will check the following folders:
.

*****************************

Running tflint in .
tflint_exitcode=0

… require the check

github-actions · 2023-10-16T08:50:54Z

`TFSEC Scan` Success

Show Output

*****************************

TFSEC will check the following folders:
.

*****************************

Running TFSEC in .
Excluding the following checks: AWS089, AWS099, AWS009, AWS097, AWS018

======================================================
tfsec is joining the Trivy family

tfsec will continue to remain available 
for the time being, although our engineering 
attention will be directed at Trivy going forward.

You can read more here: 
https://github.com/aquasecurity/tfsec/discussions/1994
======================================================
  timings
  ──────────────────────────────────────────
  disk i/o             138.304µs
  parsing              14.414568ms
  adaptation           226.205µs
  checks               8.23501ms
  total                23.014087ms

  counts
  ──────────────────────────────────────────
  modules downloaded   0
  modules processed    1
  blocks processed     48
  files read           4

  results
  ──────────────────────────────────────────
  passed               6
  ignored              4
  critical             0
  high                 0
  medium               0
  low                  0


No problems detected!

tfsec_exitcode=0

`Checkov Scan` Failed

Show Output

*****************************

Checkov will check the following folders:
.

*****************************

Running Checkov in .
Excluding the following checks: CKV_GIT_1
terraform scan results:

Passed checks: 139, Failed checks: 0, Skipped checks: 31

github_actions scan results:

Passed checks: 175, Failed checks: 1, Skipped checks: 0

Check: CKV2_GHA_1: "Ensure top-level permissions are not set to write-all"
	FAILED for resource: on(Generate Terraform README docs)
	File: /.github/workflows/documentation.yml:0-1

checkov_exitcode=1

`CTFLint Scan` Success

Show Output

*****************************

Setting default tflint config...
Running tflint --init...
Installing `terraform` plugin...
Installed `terraform` (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.2.1)
tflint will check the following folders:
.

*****************************

Running tflint in .
tflint_exitcode=0

… require the check

github-actions · 2023-10-16T12:35:19Z

`TFSEC Scan` Success

Show Output

*****************************

TFSEC will check the following folders:
.

*****************************

Running TFSEC in .
Excluding the following checks: AWS089, AWS099, AWS009, AWS097, AWS018

======================================================
tfsec is joining the Trivy family

tfsec will continue to remain available 
for the time being, although our engineering 
attention will be directed at Trivy going forward.

You can read more here: 
https://github.com/aquasecurity/tfsec/discussions/1994
======================================================
  timings
  ──────────────────────────────────────────
  disk i/o             160.705µs
  parsing              29.476729ms
  adaptation           313.309µs
  checks               9.743374ms
  total                39.694117ms

  counts
  ──────────────────────────────────────────
  modules downloaded   0
  modules processed    1
  blocks processed     48
  files read           4

  results
  ──────────────────────────────────────────
  passed               6
  ignored              4
  critical             0
  high                 0
  medium               0
  low                  0


No problems detected!

tfsec_exitcode=0

`Checkov Scan` Failed

Show Output

*****************************

Checkov will check the following folders:
.

*****************************

Running Checkov in .
Excluding the following checks: CKV_GIT_1
terraform scan results:

Passed checks: 139, Failed checks: 0, Skipped checks: 31

github_actions scan results:

Passed checks: 175, Failed checks: 1, Skipped checks: 0

Check: CKV2_GHA_1: "Ensure top-level permissions are not set to write-all"
	FAILED for resource: on(Generate Terraform README docs)
	File: /.github/workflows/documentation.yml:0-1

checkov_exitcode=1

`CTFLint Scan` Success

Show Output

*****************************

Setting default tflint config...
Running tflint --init...
Installing `terraform` plugin...
Installed `terraform` (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.2.1)
tflint will check the following folders:
.

*****************************

Running tflint in .
tflint_exitcode=0

Additional checkov error reported

5cb60dd

SteveLinden requested a review from a team as a code owner October 16, 2023 06:58

SteveLinden changed the title ~~Additional checkov error reported~~ #checkov:skip=CKV_AWS_26: Part of the testing routine so doesn't require the check really Oct 16, 2023

SteveLinden changed the title ~~#checkov:skip=CKV_AWS_26: Part of the testing routine so doesn't require the check really~~ #checkov:skip=CKV_AWS_26: Encryption is not required as the topic is only in the test run Oct 16, 2023

SteveLinden changed the title ~~#checkov:skip=CKV_AWS_26: Encryption is not required as the topic is only in the test run~~ #checkov:skip=CKV_AWS_26: it's part of the testing routine so doesn't require the check Oct 16, 2023

#checkov:skip=CKV_AWS_26: it's part of the testing routine so doesn't…

36e1e72

… require the check

SteveLinden mentioned this pull request Oct 16, 2023

Fix a couple of checkov issues on modernisation-platform-terraform-s3-bucket ministryofjustice/modernisation-platform#4996

Closed

3 tasks

#checkov:skip=CKV_AWS_26: it's part of the testing routine so doesn't…

4a82292

… require the check

dms1981 approved these changes Oct 16, 2023

View reviewed changes

SteveLinden merged commit 568694e into main Oct 16, 2023
3 of 5 checks passed

SteveLinden deleted the fix/ckv_AWS-26 branch October 16, 2023 12:38

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

#checkov:skip=CKV_AWS_26: it's part of the testing routine so doesn't require the check #284

#checkov:skip=CKV_AWS_26: it's part of the testing routine so doesn't require the check #284

SteveLinden commented Oct 16, 2023 •

edited

Loading

github-actions bot commented Oct 16, 2023

github-actions bot commented Oct 16, 2023

github-actions bot commented Oct 16, 2023

github-actions bot commented Oct 16, 2023

#checkov:skip=CKV_AWS_26: it's part of the testing routine so doesn't require the check #284

#checkov:skip=CKV_AWS_26: it's part of the testing routine so doesn't require the check #284

Conversation

SteveLinden commented Oct 16, 2023 • edited Loading

github-actions bot commented Oct 16, 2023

TFSEC Scan Success

Checkov Scan Failed

CTFLint Scan Success

github-actions bot commented Oct 16, 2023

TFSEC Scan Success

Checkov Scan Failed

CTFLint Scan Success

github-actions bot commented Oct 16, 2023

TFSEC Scan Success

Checkov Scan Failed

CTFLint Scan Success

github-actions bot commented Oct 16, 2023

TFSEC Scan Success

Checkov Scan Failed

CTFLint Scan Success

SteveLinden commented Oct 16, 2023 •

edited

Loading

`TFSEC Scan` Success

`Checkov Scan` Failed

`CTFLint Scan` Success

`TFSEC Scan` Success

`Checkov Scan` Failed

`CTFLint Scan` Success

`TFSEC Scan` Success

`Checkov Scan` Failed

`CTFLint Scan` Success

`TFSEC Scan` Success

`Checkov Scan` Failed

`CTFLint Scan` Success