Make opa check respect --ignore when --bundle flag is set (#7137)

Fixes #7136

Signed-off-by: Anders Eknert <anders@styra.com>

cmd/check.go

@@ -7,6 +7,7 @@ package cmd
 import (
 	"fmt"
 	"io"
+	"io/fs"
 	"os"
 
 	"github.com/spf13/cobra"
@@ -87,6 +88,7 @@ func checkModules(params checkParams, args []string) error {
 				WithSkipBundleVerification(true).
 				WithProcessAnnotation(true).
 				WithCapabilities(capabilities).
+				WithFilter(filterFromPaths(params.ignore)).
 				AsBundle(path)
 			if err != nil {
 				return err
@@ -130,6 +132,12 @@ func checkModules(params checkParams, args []string) error {
 	return nil
 }
 
+func filterFromPaths(paths []string) loader.Filter {
+	return func(abspath string, info fs.FileInfo, depth int) bool {
+		return loaderFilter{Ignore: paths}.Apply(abspath, info, depth)
+	}
+}
+
 func outputErrors(format string, err error) {
 	var out io.Writer
 	if err != nil {

cmd/check_test.go

@@ -188,6 +188,27 @@ func TestCheckIgnoresNonRegoFiles(t *testing.T) {
 	})
 }
 
+func TestCheckIgnoreBundleMode(t *testing.T) {
+	t.Parallel()
+
+	files := map[string]string{
+		"ignore.rego":  `invalid rego`,
+		"include.rego": `package valid`,
+	}
+
+	test.WithTempFS(files, func(root string) {
+		params := newCheckParams()
+
+		params.ignore = []string{"ignore.rego"}
+		params.bundleMode = true
+
+		err := checkModules(params, []string{root})
+		if err != nil {
+			t.Fatalf("unexpected error: %v", err)
+		}
+	})
+}
+
 func TestCheckFailsOnInvalidRego(t *testing.T) {
 	files := map[string]string{
 		"test.rego": `package test