ci: add .checkov.yaml to ignore node_modules

Author: KristjanESPERANTO

.checkov.yaml

@@ -1,12 +1,6 @@
-# Checkov config: skip scanning third-party dependency folders
-# This prevents Checkov from analyzing files under node_modules and similar
-# which often include GitHub Actions/workflows belonging to dependencies.
-# See: https://www.checkov.io/ for configuration options.
-
-skip_paths:
-  - "**/node_modules/**"
-  - "**/.venv/**"
-  - "**/.cache/**"
-# Optionally you can explicitly skip checks (not recommended globally)
-# skip_checks:
-#   - CKV2_GHA_1
+# Checkov configuration
+# Skip scanning dependency directories and cache folders
+skip-path:
+  - node_modules
+  - .venv
+  - .cache