Checkov gdnconifg file cannot set soft-fail property #130

Activity

1. Arhughes14 commented on Mar 28, 2025

   

   Aidan Hughes (Arhughes14)

   on Mar 28, 2025

   Author

   More actions

   When using a config file:

   

   When using environment variables:

   
2. newbloke82 commented on Sep 23, 2025

   

   newbloke82

   on Sep 23, 2025

   More actions

   Aidan Hughes (@Arhughes14) can you try the following?

   {
     "tools": [
       {
         "tool": {
           "name": "Checkov",
           "version": "Latest"
         },
         "arguments": {
           "Soft": "true",
           "DownloadExternalModules": "true",
           "SkipCheck": "CKV_TF_1",
           "Quiet": "true"
         }
       }
     ]
   }
   
   

   👍React with 👍1Reacted by Aidan Hughes
3. Arhughes14 commented on Sep 24, 2025

   

   Aidan Hughes (Arhughes14)

   on Sep 24, 2025

   Author

   More actions

   thanks newbloke82 I will give this a go
4. newbloke82 commented on Sep 26, 2025

   

   newbloke82

   on Sep 26, 2025

   More actions

   There are some hints in the 'Install Locally' documentation.

   You can use the 'guardian configure' command to generate a gdnconfig file for your tool of choice....

   guardian configure -t checkov
   

   The setup of the configuration is interactive - it reveals more options than are available in the documentation. The default checkov.gdnconfig file is as follows...

   {
     "fileVersion": "0",
     "jobs": [],
     "commands": [],
     "tools": [
       {
         "fileVersion": "0",
         "tool": {
           "name": "checkov",
           "version": "3.2.435"
         },
         "arguments": {
           "TargetDirectory": "$(Checkov.DefaultTargetDirectory)",
           "Help": false,
           "Version": false,
           "OutputType": "sarif",
           "List": false,
           "Quiet": false,
           "Compact": false,
           "RunAllExternalChecks": false,
           "Soft": true,
           "ShowConfig": false,
           "CreateBaseline": false,
           "OutputBaselineAsSkipped": false,
           "NoFailOnCrash": false,
           "EnableSecretScanAllFiles": false
         },
         "outputExtension": "sarif",
         "successfulExitCodes": [
           0
         ],
         "errorExitCodes": {
           "1": "An error has occurred running the Checkov tool."
         },
         "outputPaths": []
       }
     ]
   }
   
5. DimaBir commented on Jul 28, 2026

   

   Dima Birenbaum (DimaBir)

   on Jul 28, 2026

   Collaborator

   More actions

   We're cleaning up the issue backlog in this repo, and this one has been inactive for a long time, so we're closing it.

   If it's still affecting you, just reopen it or drop a comment — that's enough, and we'll pick it up from there. Nothing else needed from you.

   Sorry we left this sitting.
6. Dima Birenbaum (DimaBir)

   closed this as not plannedon Jul 28, 2026