https://github.com/env0/env0-checkov-plugin
env0 Checkov plugin
https://github.com/env0/env0-checkov-plugin
Last synced: 4 months ago
JSON representation
env0 Checkov plugin
- Host: GitHub
- URL: https://github.com/env0/env0-checkov-plugin
- Owner: env0
- License: mpl-2.0
- Created: 2022-12-06T15:36:25.000Z (over 3 years ago)
- Default Branch: main
- Last Pushed: 2024-09-16T09:52:30.000Z (almost 2 years ago)
- Last Synced: 2026-02-15T16:20:14.569Z (4 months ago)
- Homepage: https://env0.com
- Size: 19.5 KB
- Stars: 0
- Watchers: 6
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# env0 Checkov Plugin
This env0 Checkov Plugin will allow you to run `checkov` scans on an IaC directory as a part of your custom flow. To use this plugin, you will need to use version 2 of `env0.yml`.
We are using Checkov version `2.2.105`
## Inputs
The Checkov plugin accepts the following inputs:
* directory (required) - the path to the directory with the IaC code to scan (the root folder is your project's root folder)
* flags - a string containing additional flags as one string
## Example Usage
In this example we will run `checkov` scan on our tf folder before the "Terraform Plan" step of a deploy. We will call that step "My Step Name":
```yaml
version: 2
deploy:
steps:
terraformPlan:
before:
- name: My Step Name # The name that will be presented in the UI for this step
use: https://github.com/env0/env0-checkov-plugin
inputs:
directory: .
flags: --framework terraform
```
## Further Reading
You can read more about `checkov` and the available flags [here](https://www.checkov.io/2.Basics/CLI%20Command%20Reference.html#cli-command-reference).