[Please Do Not Merge] Test for Checkov + PR Commenter by senglezou · Pull Request #14 · smithy-security/e2e-monorepo

senglezou · 2025-10-06T13:52:20Z

Validate findings with running the following locally:

checkov -d "AWSGOAT" -o=sarif --soft-fail --output-file-path="test1"

For comment #14 (comment) we get the following locally:

Check: CKV_AWS_50: "X-Ray tracing is enabled for Lambda"
	FAILED for resource: aws_lambda_function.react_lambda_app
	File: /modules/module-3/main.tf:23-30
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-serverless-policies/bc-aws-serverless-4

		23 | resource "aws_lambda_function" "react_lambda_app" {
		24 |   filename      = "resources/lambda/out/reactapp.zip"
		25 |   function_name = "blog-application"
		26 |   handler       = "index.handler"
		27 |   runtime       = "nodejs14.x"
		28 |   role          = aws_iam_role.blog_app_lambda.arn
		29 |   depends_on    = [data.archive_file.lambda_zip, null_resource.file_replacement_lambda_react]
		30 | }

ghost

Smithy scan results

ghost · 2025-10-06T13:55:54Z

+  depends_on  = [aws_s3_bucket_object.upload_folder_prod]
+}
+
+resource "aws_lambda_function" "react_lambda_app" {


X-Ray tracing is enabled for Lambda

Instance checkov-pr-commenter-5f068e

Tool Checkov

Description
X-Ray tracing is enabled for Lambda
Help: X-Ray tracing is enabled for Lambda
Resource: aws_lambda_function.react_lambda_app

More info: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-serverless-policies/bc-aws-serverless-4

ghost · 2025-10-06T13:55:54Z

+  depends_on  = [aws_s3_bucket_object.upload_folder_prod]
+}
+
+resource "aws_lambda_function" "react_lambda_app" {


Ensure that AWS Lambda function is configured for a Dead Letter Queue(DLQ)

Instance checkov-pr-commenter-5f068e

Tool Checkov

Description
Ensure that AWS Lambda function is configured for a Dead Letter Queue(DLQ)
Help: Ensure that AWS Lambda function is configured for a Dead Letter Queue(DLQ)
Resource: aws_lambda_function.react_lambda_app

More info: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-for-a-dead-letter-queue-dlq

ghost · 2025-10-06T13:55:54Z

+  depends_on  = [aws_s3_bucket_object.upload_folder_prod]
+}
+
+resource "aws_lambda_function" "react_lambda_app" {


Ensure that AWS Lambda function is configured for function-level concurrent execution limit

Instance checkov-pr-commenter-5f068e

Tool Checkov

Description
Ensure that AWS Lambda function is configured for function-level concurrent execution limit
Help: Ensure that AWS Lambda function is configured for function-level concurrent execution limit
Resource: aws_lambda_function.react_lambda_app

More info: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-for-function-level-concurrent-execution-limit

ghost · 2025-10-06T13:55:54Z

+  depends_on  = [aws_s3_bucket_object.upload_folder_prod]
+}
+
+resource "aws_lambda_function" "react_lambda_app" {


Ensure Lambda Runtime is not deprecated

Instance checkov-pr-commenter-5f068e

Tool Checkov

Description
Ensure Lambda Runtime is not deprecated
Help: Ensure Lambda Runtime is not deprecated
Resource: aws_lambda_function.react_lambda_app

More info: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-363

ghost · 2025-10-06T13:55:55Z

+  depends_on  = [aws_s3_bucket_object.upload_folder_prod]
+}
+
+resource "aws_lambda_function" "react_lambda_app" {


Ensure AWS Lambda function is configured to validate code-signing

Instance checkov-pr-commenter-5f068e

Tool Checkov

Description
Ensure AWS Lambda function is configured to validate code-signing
Help: Ensure AWS Lambda function is configured to validate code-signing
Resource: aws_lambda_function.react_lambda_app

More info: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-272

ghost · 2025-10-06T13:55:55Z

+  depends_on  = [aws_s3_bucket_object.upload_folder_prod]
+}
+
+resource "aws_lambda_function" "react_lambda_app" {


Ensure that AWS Lambda function is configured inside a VPC

Instance checkov-pr-commenter-5f068e

Tool Checkov

Description
Ensure that AWS Lambda function is configured inside a VPC
Help: Ensure that AWS Lambda function is configured inside a VPC
Resource: aws_lambda_function.react_lambda_app

More info: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-inside-a-vpc-1

ghost

Smithy scan results

ghost · 2025-10-06T14:07:21Z

+  depends_on  = [aws_s3_bucket_object.upload_folder_prod]
+}
+
+resource "aws_lambda_function" "react_lambda_app" {


Ensure Lambda Runtime is not deprecated

Instance checkov-pr-commenter-715f0a

Tool Checkov

Description
Ensure Lambda Runtime is not deprecated
Help: Ensure Lambda Runtime is not deprecated
Resource: aws_lambda_function.react_lambda_app

More info: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-363

ghost · 2025-10-06T14:07:21Z

+  depends_on  = [aws_s3_bucket_object.upload_folder_prod]
+}
+
+resource "aws_lambda_function" "react_lambda_app" {


Ensure that AWS Lambda function is configured for a Dead Letter Queue(DLQ)

Instance checkov-pr-commenter-715f0a

Tool Checkov

Description
Ensure that AWS Lambda function is configured for a Dead Letter Queue(DLQ)
Help: Ensure that AWS Lambda function is configured for a Dead Letter Queue(DLQ)
Resource: aws_lambda_function.react_lambda_app

More info: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-for-a-dead-letter-queue-dlq

ghost · 2025-10-06T14:07:21Z

+  depends_on  = [aws_s3_bucket_object.upload_folder_prod]
+}
+
+resource "aws_lambda_function" "react_lambda_app" {


Ensure that AWS Lambda function is configured inside a VPC

Instance checkov-pr-commenter-715f0a

Tool Checkov

Description
Ensure that AWS Lambda function is configured inside a VPC
Help: Ensure that AWS Lambda function is configured inside a VPC
Resource: aws_lambda_function.react_lambda_app

More info: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-inside-a-vpc-1

ghost · 2025-10-06T14:07:21Z

+  depends_on  = [aws_s3_bucket_object.upload_folder_prod]
+}
+
+resource "aws_lambda_function" "react_lambda_app" {


X-Ray tracing is enabled for Lambda

Instance checkov-pr-commenter-715f0a

Tool Checkov

Description
X-Ray tracing is enabled for Lambda
Help: X-Ray tracing is enabled for Lambda
Resource: aws_lambda_function.react_lambda_app

More info: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-serverless-policies/bc-aws-serverless-4

ghost · 2025-10-06T14:07:22Z

+  depends_on  = [aws_s3_bucket_object.upload_folder_prod]
+}
+
+resource "aws_lambda_function" "react_lambda_app" {


Ensure AWS Lambda function is configured to validate code-signing

Instance checkov-pr-commenter-715f0a

Tool Checkov

Description
Ensure AWS Lambda function is configured to validate code-signing
Help: Ensure AWS Lambda function is configured to validate code-signing
Resource: aws_lambda_function.react_lambda_app

More info: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-272

ghost · 2025-10-06T14:07:22Z

+  depends_on  = [aws_s3_bucket_object.upload_folder_prod]
+}
+
+resource "aws_lambda_function" "react_lambda_app" {


Ensure that AWS Lambda function is configured for function-level concurrent execution limit

Instance checkov-pr-commenter-715f0a

Tool Checkov

Description
Ensure that AWS Lambda function is configured for function-level concurrent execution limit
Help: Ensure that AWS Lambda function is configured for function-level concurrent execution limit
Resource: aws_lambda_function.react_lambda_app

More info: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-for-function-level-concurrent-execution-limit

ghost

Smithy scan results

ghost · 2025-10-06T14:14:18Z

+  depends_on  = [aws_s3_bucket_object.upload_folder_prod]
+}
+
+resource "aws_lambda_function" "react_lambda_app" {


Ensure that AWS Lambda function is configured for a Dead Letter Queue(DLQ)

Instance checkov-pr-commenter-ae93da

Tool Checkov

Description
Ensure that AWS Lambda function is configured for a Dead Letter Queue(DLQ)
Help: Ensure that AWS Lambda function is configured for a Dead Letter Queue(DLQ)
Resource: aws_lambda_function.react_lambda_app

More info: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-for-a-dead-letter-queue-dlq

ghost · 2025-10-06T14:14:18Z

+  depends_on  = [aws_s3_bucket_object.upload_folder_prod]
+}
+
+resource "aws_lambda_function" "react_lambda_app" {


Ensure AWS Lambda function is configured to validate code-signing

Instance checkov-pr-commenter-ae93da

Tool Checkov

Description
Ensure AWS Lambda function is configured to validate code-signing
Help: Ensure AWS Lambda function is configured to validate code-signing
Resource: aws_lambda_function.react_lambda_app

More info: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-272

ghost · 2025-10-06T14:14:18Z

+  depends_on  = [aws_s3_bucket_object.upload_folder_prod]
+}
+
+resource "aws_lambda_function" "react_lambda_app" {


Ensure Lambda Runtime is not deprecated

Instance checkov-pr-commenter-ae93da

Tool Checkov

Description
Ensure Lambda Runtime is not deprecated
Help: Ensure Lambda Runtime is not deprecated
Resource: aws_lambda_function.react_lambda_app

More info: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-363

ghost · 2025-10-06T14:14:19Z

+  depends_on  = [aws_s3_bucket_object.upload_folder_prod]
+}
+
+resource "aws_lambda_function" "react_lambda_app" {


Ensure Lambda Runtime is not deprecated

Instance checkov-pr-commenter-ae93da

Tool Checkov

Description
Ensure Lambda Runtime is not deprecated
Help: Ensure Lambda Runtime is not deprecated
Resource: aws_lambda_function.react_lambda_app

More info: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-363

ghost · 2025-10-06T14:14:19Z

+  depends_on  = [aws_s3_bucket_object.upload_folder_prod]
+}
+
+resource "aws_lambda_function" "react_lambda_app" {


Ensure that AWS Lambda function is configured for a Dead Letter Queue(DLQ)

Instance checkov-pr-commenter-ae93da

Tool Checkov

Description
Ensure that AWS Lambda function is configured for a Dead Letter Queue(DLQ)
Help: Ensure that AWS Lambda function is configured for a Dead Letter Queue(DLQ)
Resource: aws_lambda_function.react_lambda_app

More info: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-for-a-dead-letter-queue-dlq

ghost · 2025-10-06T14:14:19Z

+  depends_on  = [aws_s3_bucket_object.upload_folder_prod]
+}
+
+resource "aws_lambda_function" "react_lambda_app" {


X-Ray tracing is enabled for Lambda

Instance checkov-pr-commenter-ae93da

Tool Checkov

Description
X-Ray tracing is enabled for Lambda
Help: X-Ray tracing is enabled for Lambda
Resource: aws_lambda_function.react_lambda_app

More info: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-serverless-policies/bc-aws-serverless-4

ghost · 2025-10-06T14:14:19Z

+  depends_on  = [aws_s3_bucket_object.upload_folder_prod]
+}
+
+resource "aws_lambda_function" "react_lambda_app" {


Ensure that AWS Lambda function is configured for function-level concurrent execution limit

Instance checkov-pr-commenter-ae93da

Tool Checkov

Description
Ensure that AWS Lambda function is configured for function-level concurrent execution limit
Help: Ensure that AWS Lambda function is configured for function-level concurrent execution limit
Resource: aws_lambda_function.react_lambda_app

More info: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-for-function-level-concurrent-execution-limit

ghost · 2025-10-06T14:14:19Z

+  depends_on  = [aws_s3_bucket_object.upload_folder_prod]
+}
+
+resource "aws_lambda_function" "react_lambda_app" {


Ensure that AWS Lambda function is configured inside a VPC

Instance checkov-pr-commenter-ae93da

Tool Checkov

Description
Ensure that AWS Lambda function is configured inside a VPC
Help: Ensure that AWS Lambda function is configured inside a VPC
Resource: aws_lambda_function.react_lambda_app

More info: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-inside-a-vpc-1

ghost · 2025-10-06T14:14:19Z

+  depends_on  = [aws_s3_bucket_object.upload_folder_prod]
+}
+
+resource "aws_lambda_function" "react_lambda_app" {


Ensure AWS Lambda function is configured to validate code-signing

Instance checkov-pr-commenter-ae93da

Tool Checkov

Description
Ensure AWS Lambda function is configured to validate code-signing
Help: Ensure AWS Lambda function is configured to validate code-signing
Resource: aws_lambda_function.react_lambda_app

More info: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-272

ghost · 2025-10-06T14:14:19Z

+  depends_on  = [aws_s3_bucket_object.upload_folder_prod]
+}
+
+resource "aws_lambda_function" "react_lambda_app" {


Ensure that AWS Lambda function is configured for function-level concurrent execution limit

Instance checkov-pr-commenter-ae93da

Tool Checkov

Description
Ensure that AWS Lambda function is configured for function-level concurrent execution limit
Help: Ensure that AWS Lambda function is configured for function-level concurrent execution limit
Resource: aws_lambda_function.react_lambda_app

More info: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-for-function-level-concurrent-execution-limit

Test for Checkov + PR Commenter

e1d49f2

senglezou requested a review from northdpole as a code owner October 6, 2025 13:52

ghost reviewed Oct 6, 2025

View reviewed changes

Add one more folder for test

8869aa2

ghost reviewed Oct 6, 2025

View reviewed changes

Uh oh!

Conversation

senglezou commented Oct 6, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

ghost left a comment

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

ghost left a comment

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

ghost left a comment

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

senglezou commented Oct 6, 2025 •

edited

Loading