You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardexpand all lines: CONTRIBUTING.md
+2-2
Original file line number
Diff line number
Diff line change
@@ -8,13 +8,13 @@ If you've already developed new checks we'd be happy to take a look at them and
8
8
9
9
## Open an issue
10
10
11
-
Checkov is an open source project maintained by [Bridgecrew](https://bridgecrew.io/?utm_source=github&utm_medium=organic_oss&utm_campaign=checkov). We have dedicated maintainers developing
11
+
Checkov is an open source project maintained by [Prisma Cloud by Palo Alto Networks](https://www.prismacloud.io/?utm_source=github&utm_medium=organic_oss&utm_campaign=checkov). We have dedicated maintainers developing
12
12
new content and adding more features. If you have a bug or an idea, start by opening an issue. Try to make it as
13
13
descriptive as possible.
14
14
15
15
## Developing and contributing code
16
16
17
-
Dedicated Bridgecrew maintainers are actively developing new content and adding more features. We would be delighted to
17
+
Dedicated Prisma Cloud maintainers are actively developing new content and adding more features. We would be delighted to
18
18
chat and look at your code. Here are a few guidelines we follow. Hopefully, these will ensure your contribution could
[](https://bridgecrew.io/?utm_source=github&utm_medium=organic_oss&utm_campaign=checkov)
3
+
[](https://prismacloud.io/?utm_source=github&utm_medium=organic_oss&utm_campaign=checkov)
**Checkov** is a static code analysis tool for infrastructure as code (IaC) and also a software composition analysis (SCA) tool for images and open source packages.
@@ -19,15 +19,15 @@ It scans cloud infrastructure provisioned using [Terraform](https://terraform.io
19
19
20
20
It performs [Software Composition Analysis (SCA) scanning](docs/7.Scan%20Examples/Sca.md) which is a scan of open source packages and images for Common Vulnerabilities and Exposures (CVEs).
21
21
22
-
Checkov also powers [**Bridgecrew**](https://bridgecrew.io/?utm_source=github&utm_medium=organic_oss&utm_campaign=checkov), the developer-first platform that codifies and streamlines cloud security throughout the development lifecycle. Bridgecrew identifies, fixes, and prevents misconfigurations in cloud resources and infrastructure-as-code files.
22
+
Checkov also powers [**Prisma Cloud Application Security**](https://www.prismacloud.io/prisma/cloud/cloud-code-security/?utm_source=github&utm_medium=organic_oss&utm_campaign=checkov), the developer-first platform that codifies and streamlines cloud security throughout the development lifecycle. Prisma Cloud identifies, fixes, and prevents misconfigurations in cloud resources and infrastructure-as-code files.
@@ -47,11 +47,11 @@ Checkov also powers [**Bridgecrew**](https://bridgecrew.io/?utm_source=github&ut
47
47
* Supports Context-awareness policies based on in-memory graph-based scanning.
48
48
* Supports Python format for attribute policies and YAML format for both attribute and composite policies.
49
49
* Detects [AWS credentials](docs/2.Basics/Scanning%20Credentials%20and%20Secrets.md) in EC2 Userdata, Lambda environment variables and Terraform providers.
50
-
*[Identifies secrets](https://bridgecrew.io/blog/checkov-secrets-scanning-find-exposed-credentials-in-iac/) using regular expressions, keywords, and entropy based detection.
50
+
*[Identifies secrets](https://www.prismacloud.io/prisma/cloud/secrets-security) using regular expressions, keywords, and entropy based detection.
51
51
* Evaluates [Terraform Provider](https://registry.terraform.io/browse/providers) settings to regulate the creation, management, and updates of IaaS, PaaS or SaaS managed through Terraform.
52
52
* Policies support evaluation of [variables](docs/2.Basics/Handling%20Variables.md) to their optional default value.
53
53
* Supports in-line [suppression](docs/2.Basics/Suppressing%20and%20Skipping%20Policies.md) of accepted risks or false-positives to reduce recurring scan failures. Also supports global skip from using CLI.
54
-
*[Output](docs/2.Basics/Reviewing%20Scan%20Results.md) currently available as CLI, [CycloneDX](https://cyclonedx.org), JSON, JUnit XML, CSV, SARIF and github markdown and link to remediation [guides](https://docs.bridgecrew.io/docs/aws-policy-index).
54
+
*[Output](docs/2.Basics/Reviewing%20Scan%20Results.md) currently available as CLI, [CycloneDX](https://cyclonedx.org), JSON, JUnit XML, CSV, SARIF and github markdown and link to remediation [guides](https://docs.prismacloud.io/en/enterprise-edition/policy-reference/).
55
55
56
56
## Screenshots
57
57
@@ -124,12 +124,12 @@ terraform show -json tf.plan > tf.json
124
124
checkov -f tf.json
125
125
```
126
126
Note: `terraform show` output file `tf.json` will be a single line.
127
-
For that reason all findings will be reported line number 0 by checkov
127
+
For that reason all findings will be reported line number 0 by Checkov
128
128
```sh
129
129
check: CKV_AWS_21: "Ensure all data stored in the S3 bucket have versioning enabled"
@@ -384,9 +384,9 @@ You can override the default set of directories to skip by setting the environme
384
384
The console output is in colour by default, to switch to a monochrome output, set the environment variable:
385
385
`ANSI_COLORS_DISABLED`
386
386
387
-
#### VSCODE Extension
387
+
#### VS Code Extension
388
388
389
-
If you want to use checkov's within vscode, give a try to the vscode extension available at [vscode](https://marketplace.visualstudio.com/items?itemName=Bridgecrew.checkov)
389
+
If you want to use Checkov within VS Code, give a try to the vscode extension available at [VS Code](https://marketplace.visualstudio.com/items?itemName=Bridgecrew.checkov)
Users can also create a config file using the `--create-config` command, which takes the current command line args and writes them out to a given path. For example:
Will create a `config.yaml` file which looks like this:
409
409
```yaml
@@ -424,7 +424,7 @@ framework:
424
424
- all
425
425
output: cli
426
426
quiet: true
427
-
repo-id: bridgecrew/sample-repo
427
+
repo-id: prisma-cloud/sample-repo
428
428
skip-check:
429
429
- CKV_DOCKER_3
430
430
- CKV_DOCKER_2
@@ -468,17 +468,15 @@ Looking to contribute new checks? Learn how to write a new check (AKA policy) [h
468
468
469
469
## Disclaimer
470
470
`checkov` does not save, publish or share with anyone any identifiable customer information.
471
-
No identifiable customer information is used to query Bridgecrew's publicly accessible guides.
472
-
`checkov` uses Bridgecrew's API to enrich the results with links to remediation guides.
471
+
No identifiable customer information is used to query Prisma Cloud's publicly accessible guides.
472
+
`checkov` uses Prisma Cloud's API to enrich the results with links to remediation guides.
473
473
To skip this API call use the flag `--skip-download`.
474
474
475
475
## Support
476
476
477
-
[Bridgecrew](https://bridgecrew.io/?utm_source=github&utm_medium=organic_oss&utm_campaign=checkov) builds and maintains Checkov to make policy-as-code simple and accessible.
477
+
[Prisma Cloud](https://www.prismacloud.io/?utm_source=github&utm_medium=organic_oss&utm_campaign=checkov) builds and maintains Checkov to make policy-as-code simple and accessible.
478
478
479
-
Start with our [Documentation](https://bridgecrewio.github.io/checkov/) for quick tutorials and examples.
Start with our [Documentation](https://www.checkov.io/1.Welcome/Quick%20Start.html) for quick tutorials and examples.
482
480
483
481
## Python Version Support
484
482
We follow the official support cycle of Python and we use automated tests for all supported versions of Python. This means we currently support Python 3.7 - 3.11, inclusive. Note that Python 3.7 is reaching EOL on June 2023. After that time, we will have a short grace period where we will continue 3.7 support until September 2023, and then it will no longer be considered supported for Checkov. If you run into any issues with any non-EOL Python version, please open an Issue.
Copy file name to clipboardexpand all lines: docs/1.Welcome/Quick Start.md
+2-4
Original file line number
Diff line number
Diff line change
@@ -155,9 +155,7 @@ Check: "S3 Bucket has an ACL defined which allows public access."
155
155
156
156
## Visualizing scan output
157
157
158
-
In addition to the various formats for seeing scan results (for example, CLI), you can also visualize Checkov results with a quick integration with a free Bridgecrew account. Read more about [visualizing scan results in the Bridgecrew platform](https://www.checkov.io/2.Basics/Visualizing%20Checkov%20Output.html).
159
-
160
-

158
+
In addition to the various formats for seeing scan results (for example, CLI), you can also visualize Checkov results with a quick integration with a Prisma Cloud account. Read more about [visualizing scan results in Prisma Cloud](https://www.checkov.io/2.Basics/Visualizing%20Checkov%20Output.html).
161
159
162
160
## Integrations
163
161
@@ -175,4 +173,4 @@ You can integrate Checkov with:
175
173
176
174
## Add-ons
177
175
178
-
To get real-time IaC scanning and in-line fixes directly from your IDE, check out the [Checkov Visual Studio Code extension](https://marketplace.visualstudio.com/items?itemName=Bridgecrew.checkov) and the [Checkov JetBrains Plugin](https://plugins.jetbrains.com/plugin/17721-checkov).
176
+
To get real-time IaC scanning and in-line fixes directly from your IDE, check out the [Checkov Visual Studio Code extension](https://marketplace.visualstudio.com/items?itemName=Bridgecrew.checkov) and the [Checkov JetBrains Plugin](https://plugins.jetbrains.com/plugin/21907-prisma-cloud).
0 commit comments