From e93ab7d679e4e94a9cb09a49f6c3438ec6decd8b Mon Sep 17 00:00:00 2001 From: Fazle Arefin Date: Sun, 3 Mar 2024 04:23:55 +1100 Subject: [PATCH] checkov: add page (#12402) * checkov: add page --------- Co-authored-by: Juri Dispan --- pages/common/checkov.md | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 pages/common/checkov.md diff --git a/pages/common/checkov.md b/pages/common/checkov.md new file mode 100644 index 000000000..1b1833cc3 --- /dev/null +++ b/pages/common/checkov.md @@ -0,0 +1,17 @@ +# checkov + +> Checkov is a static code analysis tool for Infrastructure as Code (IaC). +> It is also a software composition analysis (SCA) tool for images and open source packages. +> More information: . + +- Scan a directory containing IaC (Terraform, Cloudformation, ARM, Ansible, Bicep, Dockerfile, etc): + +`checkov --directory {{path/to/directory}}` + +- Scan an IaC file, omitting code blocks in the output: + +`checkov --compact --file {{path/to/file}}` + +- List all checks for all IaC types: + +`checkov --list`