Skip to content

Chekov hangs during scanning terraform module with syntax typo #6762

@dukhlov

Description

@dukhlov

Describe the issue
In case of syntax mistake in terraform provider.assume_role.role_arn string interpolation checkov hangs, eats 100% of a single cpu core. Exit with a failure is expected
Examples
Create a simple terraform module test_module with a single file
main.tf:

variable "account_id" {
  type = string
}

variable "role_name" {
  type = string
}

provider "aws" {
  assume_role {
    role_arn     = "arn:aws:iam::${var.account_id}:role/${var.role_name"
  }
}

run checkov -d test_module

Exception Trace

There is no exception. Log just got stuck

Desktop (please complete the following information):

  • OS: MacOS 13.5
  • Checkov Version: 3.2.255

Activity

stale

stale commented on Apr 10, 2025

@stale

Thanks for contributing to Checkov! We've automatically marked this issue as stale to keep our issues list tidy, because it has not had any activity for 6 months. It will be closed in 14 days if no further activity occurs. Commenting on this issue will remove the stale tag. If you want to talk through the issue or help us understand the priority and context, feel free to add a comment or join us in the Checkov slack channel at codifiedsecurity.slack.com
Thanks!

stale

stale commented on Apr 24, 2025

@stale

Closing issue due to inactivity. If you feel this is in error, please re-open, or reach out to the community via slack: codifiedsecurity.slack.com Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

      Participants

      @dukhlov

      Issue actions

        Chekov hangs during scanning terraform module with syntax typo · Issue #6762 · bridgecrewio/checkov