which-cli/
browse
checkov/

Checkov

Prisma Cloud / Palo Alto Networks

Static analysis tool for infrastructure as code to detect security and compliance misconfigurations.

Security & IdentityJSON
docsrepo.json
01Install
brew install checkov
02Global Flags
FlagTypeDescription
--output/-oenum [cli, json, sarif, cyclonedx, junitxml]Output format
--checkstringRun only specific check IDs
--skip-checkstringSkip specific check IDs
--frameworkstringFilter by framework (terraform, cloudformation, kubernetes, etc.)
--compactbooleanCompact output, no code blocks
03Authentication
Methods
access-tokenenvironment-variables
Env vars
BC_API_KEYPRISMA_API_URL
Docswww.checkov.io/2.Basics/CLI%20Command%20Reference.html
04Capabilities
Policy EnforcementVulnerability Scanning
Reference
binarycheckov
checkcheckov --version
authaccess-token, environment-variables
formatstext, sarif, cyclonedx, junitxml
json flag--output json