Pre-commit should scan non-Terraform files

Is your feature request related to a problem? Please describe. Running Checkov by hand will scan .tf, .yml, .yaml, and .json files for ARM templates, Cloudformation files, and Kubernetes files as well as Terraform files. The pre-commit hook only scans .tf files.

Describe the solution you’d like I’d like to use checkov as a pre-commit hook the same way we can in our pipeline.

Describe alternatives you’ve considered Since checkov is just running on the current directory via checkov -d ., the scan works on the other file types as is. But the hook will be skipped if no .tf files are changed,

[OtherDevOpsGene]

Also, the analysis runs on the entire repo if any file (currently any .tf file) is changed, failing checks in files that were unchanged. Only changed files should be analyzed. Between pass_filenames: true in .pre-commit-hooks.yaml and providing multiple --file/-f arguments to checkov, it seems like it should be doable.

[OtherDevOpsGene]

@libertyy This issue and my comments are regarding the pre-commit hook, not the GitHub action. I’m not clear on what the connection is.