u/Soggy_Psychology_312

Hello everyone,

Currently I'm thinking about integrating Checkov into my project for various security checks. However, I'm seeing a lot of noise from it - things like "module references should use hashes instead of tags", and many others - which I don't need to fix. IMO, maintaining a .checkov.yaml with all checks or skip-checks listed will likely be too much or redundant overhead. At the same, using a baseline won't protect you from issues introduced by newly added modules

So here are my questions: how do you use SAST in your infrastructure? Are there any fancy approaches in the age of AI? Do you prefer other SAST tools, or do you skip it?

There are just my thoughts, and I'd like to hear your opinions
Thank you!