Unable to Authenticate to Private Terraform Module Registry with Checkov
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 25/100
Research direction
No repository files, tests, or entry points are named. Start by reproducing the supplied MicrosoftSecurityDevOps@1 YAML with Checkov and compare how each environment variable is passed to the task. Done means the task can authenticate to the private Terraform module registry and scan the external modules successfully.
Written by the indexing model from the issue text.
Description
I am encountering an issue with the Microsoft Security DevOps task (microsoftsecuritydevops@1) when trying to authenticate to our private Terraform module registry using the Checkov. Although Checkov supports authentication via the "TF_REGISTRY_TOKEN" environment variable, this method does not seem to work within the microsoftsecuritydevops@1 task.
Could you please provide guidance on how to successfully authenticate to a private module registry while using Checkov in this context?
Thank you.
I have tried:
- task: MicrosoftSecurityDevOps@1
displayName: 'Checkov Policy Scanner'
inputs:
command: run
policy: azuredevops
tools: checkov
break: true
publish: true
artifactName: CodeAnalysisLogs
env:
TF_REGISTRY_TOKEN: $(TF_REGISTRY_TOKEN)
TF_HOST_NAME: $(TF_HOST_NAME)
GDN_CHECKOV_FRAMEWORK: "terraform"
GDN_CHECKOV_DOWNLOADEXTERNALMODULES: "true"
and also tried:
- task: MicrosoftSecurityDevOps@1
displayName: 'Checkov Policy Scanner'
inputs:
command: run
policy: azuredevops
tools: checkov
break: true
publish: true
artifactName: CodeAnalysisLogs
env:
GDN_CHECKOV_TF_REGISTRY_TOKEN: $(TF_REGISTRY_TOKEN)
GDN_CHECKOV_TF_HOST_NAME: $(TF_HOST_NAME)
GDN_CHECKOV_FRAMEWORK: "terraform"
GDN_CHECKOV_DOWNLOADEXTERNALMODULES: "true"
But nothing seems to work. If Checkov is replacing Terrascan as the default IaC code analysis tool for microsoftsecuritydevops@1, then this feature is extremely important.
Terrascan has the GDN_TERRASCAN_USETERRAFORMCACHE to authenticate using the terraform init cache for remote modules.
- Dominant language
- TypeScript
- Stars
- 86
- Forks
- 22
- PR merge metrics
- No merged PRs in 30d
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from microsoft/security-devops-azdevops
-
Difficulty 1/5 Under an hour Newbie friendliness 68/100
-
area:task area:tools status:waiting-on-author type:docs type:question
microsoft/security-devops-azdevops#169 · 1 comment · 1 assignee ·
-
Which Defender CLI binary should be used in CI/CD pipelines — `aka.ms` or the DevOps CDN endpoint? Open
Difficulty 5/5 Over a week Newbie friendliness 35/100
microsoft/security-devops-azdevops#166 · 2 comments · 1 reaction ·
-
area:task area:tools status:team-review type:feature
microsoft/security-devops-azdevops#164 · 2 reactions · 2 assignees ·
-
area:task area:tools status:team-review type:docs type:feature
microsoft/security-devops-azdevops#163 · 17 comments · 1 assignee ·
All issues in microsoft/security-devops-azdevops
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
Eynzof/Hermes-CN-Desktop#610 ·
-
bug clawsweeper:linked-pr-open clawsweeper:needs-live-repro clawsweeper:no-new-fix-pr impact:message-loss issue-rating: 🐚 platinum hermit P2 regression
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
-
enhancement
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
-
calcite-components needs triage refactor
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
Esri/calcite-design-system#15203 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 90/100
danielmiessler/LifeOS#2218 ·