Add Checkov workflow for security scanning · hughfl/cortex-cloud-devsecops-workshop@39dc790

Triggered via push November 12, 2025 16:45

hughfl

main

Status Failure

Total duration 34s

Artifacts –

checkov.yaml

on: push

10 errors

CKV_GCP_38: "Ensure VM disks for critical VMs are encrypted with Customer Supplied Encryption Keys (CSEK)"

CKV_GCP_32: "Ensure 'Block Project-wide SSH keys' is enabled for VM instances"

CKV_GCP_40: "Ensure that Compute instances do not have public IP addresses"

CKV_GCP_39: "Ensure Compute instances are launched with Shielded VM enabled"

CKV_GCP_106: "Ensure Google compute firewall ingress does not allow unrestricted http port 80 access"

CKV_GCP_2: "Ensure Google compute firewall ingress does not allow unrestricted ssh access"

CKV_GCP_26: "Ensure that VPC Flow Logs is enabled for every subnet in a VPC Network"

CKV_GCP_74: "Ensure that private_ip_google_access is enabled for Subnet"

CKV_GCP_26: "Ensure that VPC Flow Logs is enabled for every subnet in a VPC Network"

CKV_GCP_74: "Ensure that private_ip_google_access is enabled for Subnet"