diff --git a/.checkov.yaml b/.checkov.yaml
new file mode 100644
index 00000000..3f786e93
--- /dev/null
+++ b/.checkov.yaml
@@ -0,0 +1,30 @@
+skip-path:
+  - .github/*
+  - charts/sourcegraph/examples/*
+skip-check:
+  - CKV_GHA_7
+  - CKV_K8S_8
+  - CKV_K8S_9
+  - CKV_K8S_10
+  - CKV_K8S_11
+  - CKV_K8S_12
+  - CKV_K8S_13
+  - CKV_K8S_14
+  - CKV_K8S_15
+  - CKV_K8S_16
+  - CKV_K8S_17
+  - CKV_K8S_20
+  - CKV_K8S_21
+  - CKV_K8S_22
+  - CKV_K8S_23
+  - CKV_K8S_26
+  - CKV_K8S_28
+  - CKV_K8S_29
+  - CKV_K8S_30
+  - CKV_K8S_31
+  - CKV_K8S_35
+  - CKV_K8S_37
+  - CKV_K8S_38
+  - CKV_K8S_40
+  - CKV_K8S_43
+  - CKV2_K8S_6
diff --git a/.github/workflows/checkov.yml b/.github/workflows/checkov.yml
index 8112c5bf..28f57d7a 100644
--- a/.github/workflows/checkov.yml
+++ b/.github/workflows/checkov.yml
@@ -21,11 +21,8 @@ jobs:
 
       - name: Install Checkov
         run: pip install checkov
-        
-      - name: Write skip checks config
-        run: |
-            echo "${{ vars.CHECKOV_SKIP_CHECKS }}" > .checkov.yaml
 
+      # Skip list lives in .checkov.yaml, which checkov picks up automatically.
       - name: Run Checkov scan
         run: |
           checkov -d ./charts --output cli --output sarif --output-file-path console,results.sarif