checkov scan fixes

kunduso · Nov 17, 2024 · 5484fa7 · 5484fa7
1 parent 35127bb
commit 5484fa7
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/kms.tf b/kms.tf
@@ -67,7 +67,6 @@ resource "aws_kms_key" "encryption_rest" {
   enable_key_rotation     = true
   description             = "Key to encrypt cache at rest."
   deletion_window_in_days = 7
-  #checkov:skip=CKV2_AWS_64: KMS Key policy in a separate resource
   tags = {
     Name = "${var.name}-encryption-rest"
   }

diff --git a/network.tf b/network.tf
@@ -1,4 +1,6 @@
 module "vpc" {
+  #CKV_TF_1: Ensure Terraform module sources use a commit hash
+  #checkov:skip=CKV_TF_1: This is a self hosted module where the version number is tagged rather than the commit hash.
   source                  = "github.com/kunduso/terraform-aws-vpc?ref=v1.0.0"
   region                  = var.region
   vpc_cidr                = var.vpc_cidr