checkov icon indicating copy to clipboard operation
checkov copied to clipboard

Bicep: Checkov results raised for existing resources and not possible to add suppression

Open frasermolyneux opened this issue 11 months ago • 1 comments

Describe the issue Checkov is triggering for imported (existing) Bicep resources - likely this is undesired behaviour as not all properties are available.

In addition, skipping doesn't work for the resource.

Examples Take this resource as an example:

Image

It's just importing a sqlServer resource to be referenced. Checkov triggers:

Image and Image

Both are invalid as the values are defined in the actual resource, not the imported one.

If you try and skip with:

Image

The skip is not honoured and results are still generated.

Version (please complete the following information):

  • Microsoft.Guardian.CheckovRedist_linux_amd64.3.2.353
  • I presume fairly up to date but unsure what specific version in the background as wrapped in redist

Additional context Add any other context about the problem here.

frasermolyneux avatar Mar 19 '25 04:03 frasermolyneux

This isn't reproducible on latest checkov. Please upgrade the version and if it persists, please share the entire file that is failing and the checkov command you're running.

maxamel avatar Apr 09 '25 17:04 maxamel

Thanks for contributing to Checkov! We've automatically marked this issue as stale to keep our issues list tidy, because it has not had any activity for 6 months. It will be closed in 14 days if no further activity occurs. Commenting on this issue will remove the stale tag. If you want to talk through the issue or help us understand the priority and context, feel free to add a comment or join us in the Checkov slack channel at codifiedsecurity.slack.com Thanks!

stale[bot] avatar Oct 08 '25 00:10 stale[bot]

Closing issue due to inactivity. If you feel this is in error, please re-open, or reach out to the community via slack: codifiedsecurity.slack.com Thanks!

stale[bot] avatar Oct 30 '25 04:10 stale[bot]