Skip to content

subhamay-bhattacharyya-gha/checkov-report-action

Repository files navigation

        

🛡️ Checkov SARIF Summary Action

This custom JavaScript GitHub Action reads a SARIF file generated by Checkov, extracts security and compliance findings, and writes a clean markdown summary into the GitHub Actions UI using GITHUB_STEP_SUMMARY.


📦 What It Does

  • Parses a results.sarif file.
  • Extracts rule metadata, affected files, line ranges, severity, and code snippets.
  • Outputs:
    • A markdown table of all findings.
    • A detailed section with inline code snippets for each finding.

This is especially useful for surfacing Checkov results clearly in the GitHub Actions summary tab.


🛠 Usage Example

jobs:
  checkov-summary:
    runs-on: ubuntu-latest
    steps:
      - name: 📋 Summarize and Print Checkov Scan Report with Snippets
        uses: subhamay-bhattacharyya-gha/checkov-report-action@main

About

✅ GitHub JavaScript Action - Print Checkov Scan Report

Topics

Resources

License

Code of conduct

Stars

Watchers

Forks

Contributors 2

  •  
  •