Describe the issue
There are resources in the GCP Terraform provider that allow labels but are not in the Checkov GCP taggable list. I suspect it is because some resources use other keys like user_labels or resource_labels.
Examples
google_sql_database_instance: uses "user_labels" but is not in the list of GCP taggable resources in Checkov.google_container_cluster: uses "resource_labels" but is also not in the GCP taggable resources list.
Version (please complete the following information):
Additional context
I'm evaluating IaC policy scanning tools and really like the "taggable" resources option, but noticed these gaps for GCP and am curious if this is intended or possibly an oversight. Thank you!
Describe the issue
There are resources in the GCP Terraform provider that allow labels but are not in the Checkov GCP taggable list. I suspect it is because some resources use other keys like
user_labelsorresource_labels.Examples
google_sql_database_instance: uses "user_labels" but is not in the list of GCP taggable resources in Checkov.google_container_cluster: uses "resource_labels" but is also not in the GCP taggable resources list.Version (please complete the following information):
Additional context
I'm evaluating IaC policy scanning tools and really like the "taggable" resources option, but noticed these gaps for GCP and am curious if this is intended or possibly an oversight. Thank you!