@@ -245,7 +245,7 @@ By default, this template enables [GitLab managed Terraform State](https://docs.
[As mentionned in GitLab's documentation](https://docs.gitlab.com/user/infrastructure/iac/terraform_state/#initialize-a-terraform-state-as-a-backend-by-using-gitlab-cicd),
that requires that your Terraform scripts declare the (unconfigured)
| `$TF_PROJECT_DIR/reports/tfsec.xunit.xml` | [xUnit](https://en.wikipedia.org/wiki/XUnit) test report(s) | [GitLab integration](https://docs.gitlab.com/ci/yaml/artifacts_reports/#artifactsreportsjunit) |
| `$TF_PROJECT_DIR/reports/tfsec.native.json` | tfsec JSON | [DefectDojo integration](https://docs.defectdojo.com/en/connecting_your_tools/parsers/file/tfsec/)<br/>_This report is generated only if DefectDojo template is detected_ |
| `$TF_PROJECT_DIR/reports/tfsec.native.json` | tfsec JSON | [DefectDojo integration](https://docs.defectdojo.com/supported_tools/parsers/file/tfsec/)<br/>_This report is generated only if DefectDojo template is detected_ |
### `tf-trivy` job
@@ -599,7 +599,7 @@ In addition to a textual report in the console, this job produces the following
| `$TF_PROJECT_DIR/reports/tf-trivy.trivy.json` | Trivy [JSON](https://trivy.dev/docs/latest/configuration/reporting/#json) report | [DefectDojo integration](https://docs.defectdojo.com/en/connecting_your_tools/parsers/file/trivy//)<br/>_This report is generated only if DefectDojo template is detected_ |
| `$TF_PROJECT_DIR/reports/tf-trivy.trivy.json` | Trivy [JSON](https://trivy.dev/docs/latest/configuration/reporting/#json) report | [DefectDojo integration](https://docs.defectdojo.com/supported_tools/parsers/file/trivy/)<br/>_This report is generated only if DefectDojo template is detected_ |
### `tf-checkov` job
@@ -621,7 +621,7 @@ In addition to a textual report in the console, this job produces the following
| `$TF_PROJECT_DIR/reports/checkov.native.json` | checkov JSON | [DefectDojo integration](https://docs.defectdojo.com/en/connecting_your_tools/parsers/file/checkov/)<br/>_This report is generated only if DefectDojo template is detected_ |
| `$TF_PROJECT_DIR/reports/checkov.native.json` | checkov JSON | [DefectDojo integration](https://docs.defectdojo.com/supported_tools/parsers/file/checkov/)<br/>_This report is generated only if DefectDojo template is detected_ |
You can skip checkov specific check adding following comment in code :