satisfy checkov

Dockerfile

@@ -1,4 +1,6 @@
-FROM quay.io/almalinuxorg/8-init
+#checkov:skip=CKV_DOCKER_2: no need for health check
+#checkov:skip=CKV_DOCKER_3: no need for special user
+FROM quay.io/almalinuxorg/8-init:latest
 ENV container docker
 
 RUN (cd /lib/systemd/system/sysinit.target.wants/; for i in ; do [ $i == systemd-tmpfiles-setup.service ] || rm -f $i; done);

tasks/backups.yml

@@ -1,4 +1,5 @@
 ---
+#checkov:skip=CKV2_ANSIBLE_3: Block is only used for the when condition and the tags
 - name: Create backup directories
   ansible.builtin.file:
     path: "{{ item }}"

tasks/convert_user_to_ldif.yml

@@ -1,4 +1,5 @@
 ---
+#checkov:skip=CKV2_ANSIBLE_3: Block is used for the when condition only
 - name: Select passwd line
   ansible.builtin.command: 'grep "^{{ user_data_item.name }}:" /var/tmp/passwd.mig'
   register: passwd_mig_content

tasks/httpd.yml

@@ -1,4 +1,5 @@
 ---
+#checkov:skip=CKV2_ANSIBLE_3: Block is used for the when condition only
 - name: Open firewall
   tags:
     - dyndns

tasks/imapsync.yml

@@ -1,4 +1,5 @@
 ---
+#checkov:skip=CKV2_ANSIBLE_3: Block is only used for the when condition and the tags
 - name: Sync old IMAP account to the current mailbox
   no_log: yes
   when: current_user.old_imap_mail is defined