Checkov Plugin

An env0 plugin that executes the checkov CLI

Overview

This plugin executes the checkov CLI and lets you easily integrate Infrastructure-as-Code security best practices within your env0 deployments.

The plugin will install the checkov binary and execute it.

For more information, check out the Checkov Plugin git repository.

Inputs

To use the Checkov plugin, you need to pass the following inputs:

  1. directory (Required) - the path to the directory with the IaC code to scan (the root folder is your project's root folder)
    flags - a string containing additional flags as one string
  2. flags - a string containing additional flags as one string

:pencil2: Suggested Blog Content

What is tfsec: Benefits, Key Features, and Examples

What is Checkov: Benefits, Key Features, and Examples

What is Terrascan: Benefits, Key Features, and Examples

Best IaC Scanning Tools