bridgecrewio/checkov

17 other commands the scanner could not classify

Commands from CI steps and task runners that look like checks but match no known tool. Some are checks, some are not.

• base_resource_check.py
• bash -c ./cdk_integration_tests/prepare_data.sh
• bash -c ./integration_tests/prepare_data.sh "$EXPR" "$EXPR"
• bash -c ./integration_tests/prepare_data.sh $EXPR 3.9
• bash -c ./sast_integration_tests/prepare_data.sh
• bash -c pipenv run pip install dist/checkov-*.whl
• cfn-lint $file -i W
• checkov -s -d terragoat --bc-api-key $PRISMA_KEY --repo-id yuvalyacoby/terragoat > checkov_report_prisma.txt
• coverage_badge -o coverage.svg -f
• pre-commit hook actionlint-docker
• pre-commit hook import-linter
• pre-commit hook pipenv-setup
• pre-commit hook teyit
• pyinstaller checkov.spec
• python checkov/main.py --list --framework $i >> $scansdoc
• python checkov/main.py --list --framework cloudformation >> $scansdoc
• zip checkov.zip dist/checkov

full scan as JSON

• Prevent sensitive data exposureNever log or store sensitive information (passwords, tokens, secrets) in clear text. This common security vulnerability can lead to crede...

  bridgecrewio/checkov Security Python security 2025-02-05

  copy raw open
• Protect sensitive dataNever log, display, or store sensitive information like passwords, tokens, or secrets in clear text. This creates significant security vu...

  bridgecrewio/checkov Security Python security 2025-02-05

  copy raw open
• Extract focused functionsBreak down complex logic into small, well-named functions that each do one thing well. This improves code readability, maintainability, a...

  bridgecrewio/checkov Code Style Python security 2025-06-08

  copy raw open
• Restrict public accessCloud resources should be configured to restrict public network access by default to minimize potential attack surfaces. Always explicitl...

  bridgecrewio/checkov Networking Python security 2025-05-13

  copy raw open
• Consistent naming conventionsMaintain consistent naming patterns throughout the codebase to improve readability and reduce confusion: 1. **Use descriptive names that ...

  bridgecrewio/checkov Naming Conventions Python security 2024-07-30

  copy raw open
• Centralize environment variablesAll environment variables should be defined in a centralized location (`checkov/common/util/env_vars_config.py`) rather than scattered th...

  bridgecrewio/checkov Configurations Python security 2025-06-23

  copy raw open
• Safe dictionary navigationAlways use the `.get()` method with appropriate default values when accessing dictionaries instead of direct key access with brackets. Th...

  bridgecrewio/checkov Null Handling Python security 2025-01-20

  copy raw open
• Restrict public networkAlways configure cloud resources to restrict or disable public network access unless explicitly required for the application's functional...

  bridgecrewio/checkov Networking Python security 2025-05-13

  copy raw open
• Write pythonic codeEmbrace Python''s idiomatic programming style to make your code more readable, concise, and maintainable. Follow these Pythonic patterns:...

  bridgecrewio/checkov Code Style Python security 2025-04-21

  copy raw open
• Choose optimal algorithmsAlways select appropriate data structures and algorithms based on their performance characteristics and the specific operations your code...

  bridgecrewio/checkov Algorithms Python security 2024-12-04

  copy raw open
• Safe dictionary accessAlways use safe dictionary access patterns when handling potentially null or missing values. This prevents KeyError and AttributeError ex...

  bridgecrewio/checkov Null Handling Python security 2024-07-29

  copy raw open
• Meaningful identifier namesChoose descriptive and semantic identifiers that clearly convey purpose, role, and behavior. Avoid vague, generic names in favor of speci...

  bridgecrewio/checkov Naming Conventions Python security 2024-08-20

  copy raw open
• Document configuration consistentlyEnsure all configuration options are clearly documented and follow consistent naming and syntax conventions. This includes: 1. **Explicit...

  bridgecrewio/checkov Configurations Markdown security 2024-08-05

  copy raw open
• Use appropriate logging levelsSelect the correct logging level based on the importance and visibility requirements of the information. Choose WARNING for issues that s...

  bridgecrewio/checkov Logging Python security 2024-10-27

  copy raw open
• Thorough test assertionsEnsure tests thoroughly validate functionality through comprehensive assertions. When writing tests: 1. Assert all relevant aspects of th...

  bridgecrewio/checkov Testing Python security 2024-07-30

  copy raw open
• Choose optimal data structuresSelect the most appropriate data structure based on the specific operations your algorithm needs to perform. This choice can dramatically...

  bridgecrewio/checkov Algorithms Python security 2024-06-03

  copy raw open
• Strategic error handlingChoose appropriate error handling strategies based on the nature of the error and recovery potential: 1. **Raise exceptions only for trul...

  bridgecrewio/checkov Error Handling Python security 2024-02-07

  copy raw open
• Strategic exception managementChoose the appropriate error handling strategy based on the context and severity of potential failures. Use exceptions for truly exceptio...

  bridgecrewio/checkov Error Handling Python security 2024-02-07

  copy raw open
• Document configuration optionsAlways provide comprehensive documentation for all configuration options, including environment variables, feature flags, and version ove...

  bridgecrewio/checkov Configurations Markdown security 2023-12-16

  copy raw open
• Use pytest best practicesAdopt modern pytest features to create maintainable, isolated, and comprehensive tests. This includes: 1. **Prefer pytest over unittest**...

  bridgecrewio/checkov Testing Python security 2025-06-23

  copy raw open
• Preserve API compatibilityWhen modifying existing APIs, function signatures, or return structures, always maintain backward compatibility to prevent breaking depen...

  bridgecrewio/checkov API Python security 2024-11-15

  copy raw open
• Precise configuration validationEnsure configuration validation logic accurately reflects security intentions and best practices. When writing validation checks: 1. Use ...

  bridgecrewio/checkov Configurations Yaml security 2023-11-02

  copy raw open
• Support all target environmentsWhen managing dependency configurations (Pipfiles, requirements.txt, lock files), ensure compatibility with all supported environments in...

  bridgecrewio/checkov Configurations Other security 2025-04-22

  copy raw open
• Comprehensive security scanningAlways configure security scanning tools with comprehensive coverage and readable output to maximize vulnerability detection. This includ...

  bridgecrewio/checkov Security Yaml security 2023-11-02

  copy raw open
• Backward compatible parametersWhen evolving API function signatures, maintain backward compatibility by making new parameters optional with sensible defaults. This all...

  bridgecrewio/checkov API Python security 2023-10-20

  copy raw open
• Validate configurations correctlyWhen writing validation logic for configurations, ensure you're using the appropriate operators that correctly test for the intended stat...

  bridgecrewio/checkov Configurations Yaml security 2023-10-16

  copy raw open
• Ensure dependency compatibilityWhen adding or updating dependencies in configuration files (Pipfile, requirements.txt), ensure compatibility with all supported Python v...

  bridgecrewio/checkov Configurations Other security 2025-04-22

  copy raw open
• Lambda CORS protectionWhen implementing network security checks for AWS Lambda functions, ensure that CORS (Cross-Origin Resource Sharing) policies are verifie...

  bridgecrewio/checkov Networking Yaml security 2025-04-20

  copy raw open
• Target core resourcesWhen implementing network security checks for serverless functions like AWS Lambda, ensure you target the core function resources rather ...

  bridgecrewio/checkov Networking Yaml security 2025-04-20

  copy raw open
• Minimize workflow complexityKeep GitHub Actions workflows efficient and maintainable by eliminating redundant configurations and ensuring comprehensive test coverage...

  bridgecrewio/checkov CI/CD Yaml security 2024-07-29

  copy raw open
• Azure encryption property namesWhen configuring encryption settings for Azure resources in ARM templates, always use the correct property names as documented in the Azu...

  bridgecrewio/checkov Security Json security 2024-07-15

  copy raw open
• Use correct encryption propertiesWhen configuring security features in Azure ARM templates, always use the correct property names as specified in the Azure documentation....

  bridgecrewio/checkov Security Json security 2024-07-15

  copy raw open
• Implement pre-commit hooksAutomate quality and security checks by implementing pre-commit hooks in your Git repositories to catch issues early in the development p...

  bridgecrewio/checkov CI/CD Markdown security 2024-06-13

  copy raw open
• Secure API endpointsAlways configure proper authorization for API endpoints to prevent unauthorized access to back-end resources. Avoid combinations that cre...

  bridgecrewio/checkov API Yaml security 2023-12-10

  copy raw open
• Configure security scanners completelySecurity scanning tools must be fully configured to maximize detection capabilities. When implementing tools like Checkov in CI/CD pipeli...

  bridgecrewio/checkov Security Yaml security 2023-08-24

  copy raw open
• Avoid hardcoded secretsNever include hardcoded secrets or credentials in your infrastructure as code files. Secrets in configuration files pose significant secu...

  bridgecrewio/checkov Security Terraform security 2023-11-21

  copy raw open
• Avoid wildcard permissionsImplement the principle of least privilege by avoiding wildcard permissions (e.g., '*') in access control policies. Always specify only t...

  bridgecrewio/checkov Security Markdown security 2023-09-25

  copy raw open
• Expand IAM wildcardsAlways expand IAM wildcard permissions (`*`) to specific actions for thorough security analysis. Wildcard permissions can unintentionally...

  bridgecrewio/checkov Security Markdown security 2023-09-25

  copy raw open