Add annotations to files in github pr

[florianmutter]

It would be nice if the checkov github action would add annotations to the files. This only requires a specific output format that is described here: https://docs.github.com/en/actions/using-workflows/workflow-commands-for-github-actions#setting-a-warning-message

Example how this will look:

[Saarett]

Hey @florianmutter , this is a very nice idea, but not in our roadmap. Do you wish to contribute it? 🙂 That would be very helpful and appreciated 👍

[UkklyDukkling]

I may be misunderstanding the intent of this request, but this checkov-action seems to already create annotations when run in our workflows? In fact, my team and I were looking for some flag/parameter to disable the behavior and are confused why nothing is mentioned in any documentation. There is nothing in our workflow to publish sarif results as annotations, but it seems to occur automatically with this actions output?

[florianmutter]

Hm, I will check again if we see this as well somehow. I did not see it yet. But this is what I want. Could you maybe share your workflow where you run checkov?

[florianmutter]

One more question @UkklyDukkling do you have "Code Scanning alerts" enabled?