diff --git a/checkov/arm/checks/resource/MySQLEncryptionEnabled.py b/checkov/arm/checks/resource/MySQLEncryptionEnabled.py index 9f86afdf572..f4f09b52f4e 100644 --- a/checkov/arm/checks/resource/MySQLEncryptionEnabled.py +++ b/checkov/arm/checks/resource/MySQLEncryptionEnabled.py @@ -13,7 +13,7 @@ def __init__(self) -> None: categories = (CheckCategories.ENCRYPTION,) super().__init__(name=name, id=id, categories=categories, supported_resources=supported_resources) - def scan_resource_conf(self, conf: dict[str, Any], entity_type: str) -> CheckResult: + def scan_resource_conf(self, conf: dict[str, Any]) -> CheckResult: properties = conf.get("properties") if properties and isinstance(properties, dict): self.evaluated_keys = ["properties/dataencryption"] diff --git a/checkov/runner_filter.py b/checkov/runner_filter.py index 7d6bc446b2d..e3e28faaa44 100644 --- a/checkov/runner_filter.py +++ b/checkov/runner_filter.py @@ -138,9 +138,14 @@ def __init__( resource_attr_to_omit ) self.sast_languages: Set[SastLanguages] = RunnerFilter.get_sast_languages(framework, skip_framework) - if self.sast_languages and any([item for item in self.framework if item.startswith(CheckType.SAST) or item == 'all']) : + if self.sast_languages and any(item for item in self.framework if item.startswith(CheckType.SAST) or item == 'all'): self.framework = [item for item in self.framework if not item.startswith(CheckType.SAST)] self.framework.append(CheckType.SAST) + elif not self.sast_languages: + # remove all SAST and CDK frameworks + self.framework = [ + item for item in self.framework if not item.startswith(CheckType.SAST) and item != CheckType.CDK + ] self.enable_git_history_secret_scan: bool = enable_git_history_secret_scan if self.enable_git_history_secret_scan: