Terraform plan scan is hanging from v3.2.65 onwards about checkov

[gruebel]

hey @nbowes24 can you try to restrict checkov to just scanning TF plans? I know there is an open issue related to secrets scanning in TF plans, checkov --framework terraform_plan ...

[nbowes24]

Hey @gruebel that does solve the hanging as well as using --skip-framework secrets as suggested in #6206.

Seems like it would best if I comment on that issue and close this one. Thanks for the suggestion!

[gruebel]

Yeah, just wanted to make sure, it is the same or a different problem.

[nbowes24]

This is still hanging in v3.2.98 for some of our plans. It was not fixed by the PR in #6206.

We are still having to pin v.3.2.63 which is working.

[nbowes24]

Update: I have been playing around with the plan file and discovered its the formatting?

This will hang

terraform show -json test.plan > test.json
checkov -f test.json --framework secrets

This will work

terraform show -json test.plan | ConvertFrom-Json | ConvertTo-Json -Depth 20 > pretty.json
checkov -f pretty.json --framework secrets