Enable GitHub releases for custom checks to import git repositories with --external-checks-git
See original GitHub issueIs your feature request related to a problem? Please describe. As per my understanding, we cannot use GitHub specific repository release with the --external-checks-git and it would need a git URL to clone the repository to the temporary folder. We are in a need of using GitHub releases to use different types of custom checks according to the release versions.
Describe the solution you’d like
It would be great if we get a feature update to use the GitHub releases with external checks.
The available usage,
checkov --external-checks-git https://github.com/bridgecrewio/checkov.git
What is expected,
Sample release URL: https://github.com/my-sample-repo/sample-project/releases/tag/v1.0.0
checkov --external-checks-git https://github.com/my-sample-repo/sample-project/releases/tag/v1.0.0
Or
checkov --external-checks-git https://github.com/bridgecrewio/checkov.git --git-release v1.0.0
Describe alternatives you’ve considered Currently, we are not using the GitHub releases.
Additional context N/A
Issue Analytics
- State:
- Created 2 years ago
- Comments:6 (3 by maintainers)
Top GitHub Comments
@WickramBug we don’t support private repositories for external checks at the moment. Having said that you can utilize birdgecrew.cloud for centralized policy management and start using it for free.
@schosterbarak thank you for the update and I’ll try out the cloud solution.