devsecops

Describe the issue
Checkov skips terraform file when it can't parse a file. When you are using checkov in gitlab ci pipeline with junitxml output, it will be better to include such erros in 'Errors' list instead of ignoring them.

Examples

resource "aws_alb" "alb" {
  name                             = "foobar-nlb"
  load_balancer_type               = "network"
  enable_cross_z

Seeing the below error while installing rush.js. Probably might need a package in the base image. Any help would be appreciated.

#21 516.9 > keytar@7.6.0 install /usr/local/lib/node_modules/@microsoft/rush/node_modules/keytar
#21 516.9 > prebuild-install || npm run build
#21 516.9 
#21 521.6 prebuild-install WARN install No prebuilt binaries found (target=14.16.0 runtime=node arch=arm64

Dependabot found an issue in a dependency that we use inside a requirements.txt file that's only used for testing. Github has auto-generated a PR for us here:

• #1755

Note that this is a file used ONLY for testing. nothing here is actually vulnerable. But I'd like to update it anyhow so dependabot doesn't have it flagged.

If you dig through the output of Github Actions, you can see that