Add support for skip-path

[josh-barker]

Hi,

I'd like to be able to specify to ignore a path in the action.

My terraform modules have the following directory structure:

./main.tf
./examples/default/main.tf

I'd like to run checkov on the root directory, but exclude the examples directory.

Cheers

[HariSekhon]

Use skip-path in .checkov.yaml - see my Templates repo for a working example that I use to skip scanning sub-modules:

https://github.com/HariSekhon/Templates/blob/master/.checkov.yaml

[josh-barker]

Hey @HariSekhon , thanks for your suggestion. I was hoping to set skip-path in the github action, instead of .checkov.yaml.

Cheers

[HariSekhon]

Yes I completely understand that - you should be able to do both.

What I find is beneficial with the .checkov.yaml is that this use a single GitHub Actions reusable workflow across all repos, eg:

https://github.com/HariSekhon/GitHub-Actions/blob/master/.github/workflows/checkov.yaml

which can be imported in each repo with a few lines:

jobs:
  checkov:
    uses: HariSekhon/GitHub-Actions/.github/workflows/checkov.yaml@master

(eg. https://github.com/HariSekhon/Terraform/blob/master/.github/workflows/checkov.yaml)

but configure different settings in each repo's .checkov.yaml, allowing for the greatest code reuse and settings flexibility combination.

[josh-barker]

Hey @HariSekhon, that's a nice pattern! Thanks for sharing! :-)