Skip to content

Commit d03bcf1

Browse files
authored
docs(general): Switch references to Bridgecrew with Prisma Cloud (bridgecrewio#5704)
* Change references * Revert code changes * One more revert * revert * banner update * Update ext_argument_parser.py
1 parent f57e241 commit d03bcf1

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

53 files changed

+197
-250
lines changed

.github/stale.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@ markComment: >
3636
It will be closed in 14 days if no further activity occurs.
3737
Commenting on this issue will remove the stale tag.
3838
If you want to talk through the issue or help us understand the priority and context,
39-
feel free to add a comment or join us in the Checkov slack channel at https://slack.bridgecrew.io
39+
feel free to add a comment or join us in the Checkov slack channel at codifiedsecurity.slack.com
4040
4141
Thanks!
4242
@@ -48,7 +48,7 @@ markComment: >
4848
closeComment: >
4949
Closing issue due to inactivity.
5050
If you feel this is in error, please re-open, or reach out to the community via slack:
51-
https://slack.bridgecrew.io
51+
codifiedsecurity.slack.com
5252
Thanks!
5353
5454
# Limit the number of actions per hour, from 1-30. Default is 30

CODE_OF_CONDUCT.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -55,7 +55,7 @@ further defined and clarified by project maintainers.
5555
## Enforcement
5656

5757
Instances of abusive, harassing, or otherwise unacceptable behavior may be
58-
reported by contacting the project team at [email protected]. All
58+
reported by contacting the project team on our community slack. All
5959
complaints will be reviewed and investigated and will result in a response that
6060
is deemed necessary and appropriate to the circumstances. The project team is
6161
obligated to maintain confidentiality with regard to the reporter of an incident.

CONTRIBUTING.md

+2-2
Original file line numberDiff line numberDiff line change
@@ -8,13 +8,13 @@ If you've already developed new checks we'd be happy to take a look at them and
88

99
## Open an issue
1010

11-
Checkov is an open source project maintained by [Bridgecrew](https://bridgecrew.io/?utm_source=github&utm_medium=organic_oss&utm_campaign=checkov). We have dedicated maintainers developing
11+
Checkov is an open source project maintained by [Prisma Cloud by Palo Alto Networks](https://www.prismacloud.io/?utm_source=github&utm_medium=organic_oss&utm_campaign=checkov). We have dedicated maintainers developing
1212
new content and adding more features. If you have a bug or an idea, start by opening an issue. Try to make it as
1313
descriptive as possible.
1414

1515
## Developing and contributing code
1616

17-
Dedicated Bridgecrew maintainers are actively developing new content and adding more features. We would be delighted to
17+
Dedicated Prisma Cloud maintainers are actively developing new content and adding more features. We would be delighted to
1818
chat and look at your code. Here are a few guidelines we follow. Hopefully, these will ensure your contribution could
1919
quickly be added to the project.
2020

INTHEWILD.md

-1
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,6 @@ Please send a PR with your company name and @githubhandle.
55

66
## Currently, officially using Checkov:
77

8-
1. [Bridgecrew](https://bridgecrew.io/) [[@schosterbarak](https://github.com/schosterbarak)]
98
1. [Nationwide Building Society](https://www.nationwide.co.uk/) [[@njgibbon](https://github.com/njgibbon)]
109
1. [globaldatanet](https://globaldatanet.com/) [[@gruebel](https://github.com/gruebel)]
1110
1. [Steamhaus](https://www.steamhaus.co.uk/) [[@bilco105](https://github.com/bilco105)]

LICENSE

+1-1
Original file line numberDiff line numberDiff line change
@@ -186,7 +186,7 @@
186186
same "printed page" as the copyright notice for easier
187187
identification within third-party archives.
188188

189-
Copyright 2019 Bridgecrew
189+
Copyright 2019 Palo Alto Networks
190190

191191
Licensed under the Apache License, Version 2.0 (the "License");
192192
you may not use this file except in compliance with the License.

README.md

+21-23
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
1-
[![checkov](https://raw.githubusercontent.com/bridgecrewio/checkov/main/docs/web/images/checkov_by_bridgecrew.png)](#)
1+
[![checkov](https://raw.githubusercontent.com/bridgecrewio/checkov/main/docs/web/images/checkov_blue_logo.png)](#)
22

3-
[![Maintained by Bridgecrew.io](https://img.shields.io/badge/maintained%20by-bridgecrew.io-blueviolet)](https://bridgecrew.io/?utm_source=github&utm_medium=organic_oss&utm_campaign=checkov)
3+
[![Maintained by Prisma Cloud](https://img.shields.io/badge/maintained_by-Prisma_Cloud-blue)](https://prismacloud.io/?utm_source=github&utm_medium=organic_oss&utm_campaign=checkov)
44
[![build status](https://github.com/bridgecrewio/checkov/workflows/build/badge.svg)](https://github.com/bridgecrewio/checkov/actions?query=workflow%3Abuild)
55
[![security status](https://github.com/bridgecrewio/checkov/workflows/security/badge.svg)](https://github.com/bridgecrewio/checkov/actions?query=event%3Apush+branch%3Amaster+workflow%3Asecurity)
66
[![code_coverage](https://raw.githubusercontent.com/bridgecrewio/checkov/main/coverage.svg?sanitize=true)](https://github.com/bridgecrewio/checkov/actions?query=workflow%3Acoverage)
@@ -10,7 +10,7 @@
1010
[![Terraform Version](https://img.shields.io/badge/tf-%3E%3D0.12.0-blue.svg)](#)
1111
[![Downloads](https://static.pepy.tech/badge/checkov)](https://pepy.tech/project/checkov)
1212
[![Docker Pulls](https://img.shields.io/docker/pulls/bridgecrew/checkov.svg)](https://hub.docker.com/r/bridgecrew/checkov)
13-
[![slack-community](https://img.shields.io/badge/Slack-4A154B?style=plastic&logo=slack&logoColor=white)](https://slack.bridgecrew.io/)
13+
[![slack-community](https://img.shields.io/badge/Slack-4A154B?style=plastic&logo=slack&logoColor=white)](https://codifiedsecurity.slack.com/)
1414

1515

1616
**Checkov** is a static code analysis tool for infrastructure as code (IaC) and also a software composition analysis (SCA) tool for images and open source packages.
@@ -19,15 +19,15 @@ It scans cloud infrastructure provisioned using [Terraform](https://terraform.io
1919

2020
It performs [Software Composition Analysis (SCA) scanning](docs/7.Scan%20Examples/Sca.md) which is a scan of open source packages and images for Common Vulnerabilities and Exposures (CVEs).
2121

22-
Checkov also powers [**Bridgecrew**](https://bridgecrew.io/?utm_source=github&utm_medium=organic_oss&utm_campaign=checkov), the developer-first platform that codifies and streamlines cloud security throughout the development lifecycle. Bridgecrew identifies, fixes, and prevents misconfigurations in cloud resources and infrastructure-as-code files.
22+
Checkov also powers [**Prisma Cloud Application Security**](https://www.prismacloud.io/prisma/cloud/cloud-code-security/?utm_source=github&utm_medium=organic_oss&utm_campaign=checkov), the developer-first platform that codifies and streamlines cloud security throughout the development lifecycle. Prisma Cloud identifies, fixes, and prevents misconfigurations in cloud resources and infrastructure-as-code files.
2323

24-
<a href="https://www.bridgecrew.cloud/login/signUp/?utm_campaign=checkov-github-repo&utm_source=github.com&utm_medium=get-started-button" title="Try_Bridgecrew">
25-
<img src="https://dabuttonfactory.com/button.png?t=Try+Bridgecrew&f=Open+Sans-Bold&ts=26&tc=fff&hp=45&vp=20&c=round&bgt=unicolored&bgc=662eff" align="right" width="120">
24+
<a href="https://www.prismacloud.io/prisma/request-a-prisma-cloud-trial/?utm_campaign=checkov-github-repo&utm_source=github.com&utm_medium=get-started-button" title="Try_Prisma_Cloud">
25+
<img src="https://dabuttonfactory.com/button.png?t=Try+Prisma+Cloud&f=Open+Sans-Bold&ts=26&tc=fff&hp=45&vp=20&c=round&bgt=unicolored&bgc=00c0e8" align="right" width="120">
2626
</a>
2727

2828

29-
<a href="https://docs.bridgecrew.io?utm_campaign=checkov-github-repo&utm_source=github.com&utm_medium=read-docs-button" title="Docs">
30-
<img src="https://dabuttonfactory.com/button.png?t=Read+the+Docs&f=Open+Sans-Bold&ts=26&tc=fff&hp=45&vp=20&c=round&bgt=unicolored&bgc=662eff" align="right" width="120">
29+
<a href="https://docs.prismacloud.io/en/enterprise-edition/use-cases/secure-the-source/secure-the-source" title="Docs">
30+
<img src="https://dabuttonfactory.com/button.png?t=Read+the+Docs&f=Open+Sans-Bold&ts=26&tc=fff&hp=45&vp=20&c=round&bgt=unicolored&bgc=00c0e8" align="right" width="120">
3131
</a>
3232

3333
## **Table of contents**
@@ -47,11 +47,11 @@ Checkov also powers [**Bridgecrew**](https://bridgecrew.io/?utm_source=github&ut
4747
* Supports Context-awareness policies based on in-memory graph-based scanning.
4848
* Supports Python format for attribute policies and YAML format for both attribute and composite policies.
4949
* Detects [AWS credentials](docs/2.Basics/Scanning%20Credentials%20and%20Secrets.md) in EC2 Userdata, Lambda environment variables and Terraform providers.
50-
* [Identifies secrets](https://bridgecrew.io/blog/checkov-secrets-scanning-find-exposed-credentials-in-iac/) using regular expressions, keywords, and entropy based detection.
50+
* [Identifies secrets](https://www.prismacloud.io/prisma/cloud/secrets-security) using regular expressions, keywords, and entropy based detection.
5151
* Evaluates [Terraform Provider](https://registry.terraform.io/browse/providers) settings to regulate the creation, management, and updates of IaaS, PaaS or SaaS managed through Terraform.
5252
* Policies support evaluation of [variables](docs/2.Basics/Handling%20Variables.md) to their optional default value.
5353
* Supports in-line [suppression](docs/2.Basics/Suppressing%20and%20Skipping%20Policies.md) of accepted risks or false-positives to reduce recurring scan failures. Also supports global skip from using CLI.
54-
* [Output](docs/2.Basics/Reviewing%20Scan%20Results.md) currently available as CLI, [CycloneDX](https://cyclonedx.org), JSON, JUnit XML, CSV, SARIF and github markdown and link to remediation [guides](https://docs.bridgecrew.io/docs/aws-policy-index).
54+
* [Output](docs/2.Basics/Reviewing%20Scan%20Results.md) currently available as CLI, [CycloneDX](https://cyclonedx.org), JSON, JUnit XML, CSV, SARIF and github markdown and link to remediation [guides](https://docs.prismacloud.io/en/enterprise-edition/policy-reference/).
5555

5656
## Screenshots
5757

@@ -124,12 +124,12 @@ terraform show -json tf.plan > tf.json
124124
checkov -f tf.json
125125
```
126126
Note: `terraform show` output file `tf.json` will be a single line.
127-
For that reason all findings will be reported line number 0 by checkov
127+
For that reason all findings will be reported line number 0 by Checkov
128128
```sh
129129
check: CKV_AWS_21: "Ensure all data stored in the S3 bucket have versioning enabled"
130130
FAILED for resource: aws_s3_bucket.customer
131131
File: /tf/tf.json:0-0
132-
Guide: https://docs.bridgecrew.io/docs/s3_16-enable-versioning
132+
Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/s3-policies/s3-16-enable-versioning
133133
```
134134

135135
If you have installed `jq` you can convert json file into multiple lines with the following command:
@@ -142,7 +142,7 @@ checkov -f tf.json
142142
Check: CKV_AWS_21: "Ensure all data stored in the S3 bucket have versioning enabled"
143143
FAILED for resource: aws_s3_bucket.customer
144144
File: /tf/tf1.json:224-268
145-
Guide: https://docs.bridgecrew.io/docs/s3_16-enable-versioning
145+
Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/s3-policies/s3-16-enable-versioning
146146

147147
225 | "values": {
148148
226 | "acceleration_status": "",
@@ -384,9 +384,9 @@ You can override the default set of directories to skip by setting the environme
384384
The console output is in colour by default, to switch to a monochrome output, set the environment variable:
385385
`ANSI_COLORS_DISABLED`
386386
387-
#### VSCODE Extension
387+
#### VS Code Extension
388388
389-
If you want to use checkov's within vscode, give a try to the vscode extension available at [vscode](https://marketplace.visualstudio.com/items?itemName=Bridgecrew.checkov)
389+
If you want to use Checkov within VS Code, give a try to the vscode extension available at [VS Code](https://marketplace.visualstudio.com/items?itemName=Bridgecrew.checkov)
390390
391391
### Configuration using a config file
392392
@@ -403,7 +403,7 @@ checkov --config-file path/to/config.yaml
403403
```
404404
Users can also create a config file using the `--create-config` command, which takes the current command line args and writes them out to a given path. For example:
405405
```sh
406-
checkov --compact --directory test-dir --docker-image sample-image --dockerfile-path Dockerfile --download-external-modules True --external-checks-dir sample-dir --quiet --repo-id bridgecrew/sample-repo --skip-check CKV_DOCKER_3,CKV_DOCKER_2 --skip-framework dockerfile secrets --soft-fail --branch develop --check CKV_DOCKER_1 --create-config /Users/sample/config.yml
406+
checkov --compact --directory test-dir --docker-image sample-image --dockerfile-path Dockerfile --download-external-modules True --external-checks-dir sample-dir --quiet --repo-id prisma-cloud/sample-repo --skip-check CKV_DOCKER_3,CKV_DOCKER_2 --skip-framework dockerfile secrets --soft-fail --branch develop --check CKV_DOCKER_1 --create-config /Users/sample/config.yml
407407
```
408408
Will create a `config.yaml` file which looks like this:
409409
```yaml
@@ -424,7 +424,7 @@ framework:
424424
- all
425425
output: cli
426426
quiet: true
427-
repo-id: bridgecrew/sample-repo
427+
repo-id: prisma-cloud/sample-repo
428428
skip-check:
429429
- CKV_DOCKER_3
430430
- CKV_DOCKER_2
@@ -468,17 +468,15 @@ Looking to contribute new checks? Learn how to write a new check (AKA policy) [h
468468
469469
## Disclaimer
470470
`checkov` does not save, publish or share with anyone any identifiable customer information.
471-
No identifiable customer information is used to query Bridgecrew's publicly accessible guides.
472-
`checkov` uses Bridgecrew's API to enrich the results with links to remediation guides.
471+
No identifiable customer information is used to query Prisma Cloud's publicly accessible guides.
472+
`checkov` uses Prisma Cloud's API to enrich the results with links to remediation guides.
473473
To skip this API call use the flag `--skip-download`.
474474
475475
## Support
476476
477-
[Bridgecrew](https://bridgecrew.io/?utm_source=github&utm_medium=organic_oss&utm_campaign=checkov) builds and maintains Checkov to make policy-as-code simple and accessible.
477+
[Prisma Cloud](https://www.prismacloud.io/?utm_source=github&utm_medium=organic_oss&utm_campaign=checkov) builds and maintains Checkov to make policy-as-code simple and accessible.
478478
479-
Start with our [Documentation](https://bridgecrewio.github.io/checkov/) for quick tutorials and examples.
480-
481-
If you need direct support you can contact us at [email protected].
479+
Start with our [Documentation](https://www.checkov.io/1.Welcome/Quick%20Start.html) for quick tutorials and examples.
482480
483481
## Python Version Support
484482
We follow the official support cycle of Python and we use automated tests for all supported versions of Python. This means we currently support Python 3.7 - 3.11, inclusive. Note that Python 3.7 is reaching EOL on June 2023. After that time, we will have a short grace period where we will continue 3.7 support until September 2023, and then it will no longer be considered supported for Checkov. If you run into any issues with any non-EOL Python version, please open an Issue.

SECURITY.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
## Reporting a Vulnerability
44

55
If you think you have found a potential security vulnerability in `checkov`,
6-
please email [email protected] directly. Do not file a public issue. If
6+
please email [email protected] directly. Do not file a public issue. If
77
English is not your first language, please try to describe the problem
88
and its impact to the best of your ability. For greater detail, please
99
use your native language and we will try our best to translate it using

checkov/common/util/banner.py

+1-1
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
| (__| | | | __/ (__| < (_) \ V /
1313
\___|_| |_|\___|\___|_|\_\___/ \_/
1414
15-
By bridgecrew.io | version: {} """.format(version)
15+
By Prisma Cloud | version: {} """.format(version)
1616

1717
new_version = check_for_update("checkov", version)
1818
if new_version:

checkov/common/util/ext_argument_parser.py

+6-7
Original file line numberDiff line numberDiff line change
@@ -202,12 +202,11 @@ def add_parser_args(self) -> None:
202202
self.add(
203203
"--include-all-checkov-policies",
204204
action="store_true",
205-
help="When running with an API key, Checkov will omit any policies that do not exist "
206-
"in the Bridgecrew or Prisma Cloud platform, except for local custom policies loaded with the "
207-
"--external-check flags. Use this key to include policies that only exist in Checkov in the scan. "
208-
"Note that this will make the local CLI results different from the results you see in the "
209-
"platform. Has no effect if you are not using an API key. Use the --check option to explicitly "
210-
"include checks by ID even if they are not in the platform, without using this flag.",
205+
help="When running with an API key, Checkov will omit any policies that do not exist in Prisma Cloud platform, "
206+
"except for local custom policies loaded with the --external-check flags. Use this key to include policies "
207+
"that only exist in Checkov in the scan. Note that this will make the local CLI results different from the "
208+
"results you see in the platform. Has no effect if you are not using an API key. Use the --check option to "
209+
"explicitly include checks by ID even if they are not in the platform, without using this flag.",
211210
)
212211
self.add(
213212
"--quiet",
@@ -355,7 +354,7 @@ def add_parser_args(self) -> None:
355354
)
356355
self.add(
357356
"--skip-download",
358-
help="Do not download any data from Bridgecrew. This will omit doc links, severities, etc., as well as "
357+
help="Do not download any data from Prisma Cloud. This will omit doc links, severities, etc., as well as "
359358
"custom policies and suppressions if using an API token. Note: it will prevent BC platform IDs from "
360359
"being available in Checkov.",
361360
action="store_true",

docs/1.Welcome/Quick Start.md

+2-4
Original file line numberDiff line numberDiff line change
@@ -155,9 +155,7 @@ Check: "S3 Bucket has an ACL defined which allows public access."
155155

156156
## Visualizing scan output
157157

158-
In addition to the various formats for seeing scan results (for example, CLI), you can also visualize Checkov results with a quick integration with a free Bridgecrew account. Read more about [visualizing scan results in the Bridgecrew platform](https://www.checkov.io/2.Basics/Visualizing%20Checkov%20Output.html).
159-
160-
![Visualizing Scan Output with Bridgecrew](visualizing-scan-results.gif)
158+
In addition to the various formats for seeing scan results (for example, CLI), you can also visualize Checkov results with a quick integration with a Prisma Cloud account. Read more about [visualizing scan results in Prisma Cloud](https://www.checkov.io/2.Basics/Visualizing%20Checkov%20Output.html).
161159

162160
## Integrations
163161

@@ -175,4 +173,4 @@ You can integrate Checkov with:
175173

176174
## Add-ons
177175

178-
To get real-time IaC scanning and in-line fixes directly from your IDE, check out the [Checkov Visual Studio Code extension](https://marketplace.visualstudio.com/items?itemName=Bridgecrew.checkov) and the [Checkov JetBrains Plugin](https://plugins.jetbrains.com/plugin/17721-checkov).
176+
To get real-time IaC scanning and in-line fixes directly from your IDE, check out the [Checkov Visual Studio Code extension](https://marketplace.visualstudio.com/items?itemName=Bridgecrew.checkov) and the [Checkov JetBrains Plugin](https://plugins.jetbrains.com/plugin/21907-prisma-cloud).

0 commit comments

Comments
 (0)