kustomize checks can only be skipped with invalid YAML

[ChrisSamo632]

Describe the issue

Checkov fails to skip kustomize framework issues when annotations are added to the kustomization.yaml file *unless those annotations are added using invalid YAML

• valid YAML, checkov skip ignored (i.e. checkov test fails):

metadata:
  annotations:
    checkov.io/skip1: CKV_K8S_14=using latest Image Tag for local development is easiest

• invalid YAML (annotation not indented so annotations is not a valid YAML Object), checkov skip accepted (i.e. checkov test passes):

metadata:
  annotations:
  checkov.io/skip1: CKV_K8S_14=using latest Image Tag for local development is easiest

Examples

Given a kustomization.yaml like

resources:
  - ../../base

images:
  - name: api
    newName: api
    newTag: latest

metadata:
  annotations:
    checkov.io/skip1: CKV_K8S_14=using latest Image Tag for local development is easiest

The checko test fails. Breaking the YAML and un-indenting the checkov.io/skip1 annotation allows the checkov test to pass.

Version (please complete the following information):

• Checkov Version: 3.2.330

[ChrisSamo632]

Also, the invalid YAML then cannot be used through kubectl apply -k ., as it cannot be parsed correctly.