question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Enable GitHub releases for custom checks to import git repositories with --external-checks-git

See original GitHub issue

Is your feature request related to a problem? Please describe. As per my understanding, we cannot use GitHub specific repository release with the --external-checks-git and it would need a git URL to clone the repository to the temporary folder. We are in a need of using GitHub releases to use different types of custom checks according to the release versions.

Describe the solution you’d like It would be great if we get a feature update to use the GitHub releases with external checks. The available usage, checkov --external-checks-git https://github.com/bridgecrewio/checkov.git What is expected, Sample release URL: https://github.com/my-sample-repo/sample-project/releases/tag/v1.0.0 checkov --external-checks-git https://github.com/my-sample-repo/sample-project/releases/tag/v1.0.0 Or checkov --external-checks-git https://github.com/bridgecrewio/checkov.git --git-release v1.0.0

Describe alternatives you’ve considered Currently, we are not using the GitHub releases.

Additional context N/A

Issue Analytics

  • State:closed
  • Created 2 years ago
  • Comments:6 (3 by maintainers)

github_iconTop GitHub Comments

1reaction
schosterbarakcommented, Jan 6, 2022

@WickramBug we don’t support private repositories for external checks at the moment. Having said that you can utilize birdgecrew.cloud for centralized policy management and start using it for free.

0reactions
WickramBugcommented, Jan 7, 2022

@schosterbarak thank you for the update and I’ll try out the cloud solution.

Read more comments on GitHub >

github_iconTop Results From Across the Web

Importing a repository with GitHub Importer - GitHub Docs
Under "Your old repository's clone URL", type the URL of the project you want to import. Text field for URL of imported repository;...
Read more >
Managing releases in a repository - GitHub Docs
You can create releases to bundle and deliver iterations of a project to users. ... see "Managing Git LFS objects in archives of...
Read more >
Support SSH for --external-checks-git · Issue #2471 - GitHub
Describe the issue If an external git repository is used for custom Checkov policies that are shared, the current implementation only ...
Read more >
Importing a Git repository using the command line - GitHub Docs
A GitHub personal account named ghuser; A repository on GitHub.com named repo.git. Create a new repository on GitHub. You'll import your external Git...
Read more >
Linking to releases - GitHub Docs
You can share every release you create on GitHub with a unique URL. On GitHub.com, navigate to the main page of the repository....
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found