This custom JavaScript GitHub Action reads a SARIF file generated by Checkov, extracts security and compliance findings, and writes a clean markdown summary into the GitHub Actions UI using GITHUB_STEP_SUMMARY
.
- Parses a
results.sarif
file. - Extracts rule metadata, affected files, line ranges, severity, and code snippets.
- Outputs:
- A markdown table of all findings.
- A detailed section with inline code snippets for each finding.
This is especially useful for surfacing Checkov results clearly in the GitHub Actions summary tab.
jobs:
checkov-summary:
runs-on: ubuntu-latest
steps:
- name: 📋 Summarize and Print Checkov Scan Report with Snippets
uses: subhamay-bhattacharyya-gha/checkov-report-action@main