Merge pull request #286 from stakater/add-checkov

Add Checkov to identify misconfigurations, vulnerabilities, and license compliance issues
stakater · Oct 26, 2023 · 0a3dbd1 · 0a3dbd1
2 parents 9061a5c + add91b4
commit 0a3dbd1
Showing 1 changed file with 7 additions and 4 deletions.
diff --git a/.github/workflows/pull_request.yaml b/.github/workflows/pull_request.yaml
@@ -4,10 +4,6 @@ on:
   pull_request_target:
     branches:
       - master
-    paths-ignore:
-    - '.github/workflows/pull_request.yaml'
-    - 'README.md'
-    - 'LICENSE'
 
 env:
   CHART_NAME: "application"
@@ -37,6 +33,13 @@ jobs:
       run: |
         helm lint ${CHART_NAME}
 
+    - name: Run Checkov action
+      uses: bridgecrewio/checkov-action@master
+      with:
+        quiet: true
+        file: ${CHART_NAME}/Chart.yaml
+        var_file: ${CHART_NAME}/values-test.yaml
+
     - name: Install kubectl
       uses: azure/setup-kubectl@v3
       with: