Before the rollout instead of after
What is already wrong in code does not have to be found in the cloud first.
← All integrations
Cloud & configuration posture Reads data
Checkov
Find misconfigurations while still in code
Checkov checks infrastructure code before it becomes an environment. The import brings those findings into the same pool as the checks of the running cloud, with the same lifecycle, the same statuses and the same waiver rules. The deviation in the Terraform module then sits next to the deviation it produced in reality.
Vendor: Prisma Cloud · www.checkov.io
What is synchronized automatically
- Findings from infrastructure-as-code runs
- Same lifecycle as cloud findings
- Waivers and measures as usual
- Can be delivered straight from the pipeline
Your benefits
One pool instead of two lists
Code findings and cloud findings sit side by side, under the same rules for status and waivers.
Connect Checkov with isidaten
We show you the connector live in your own environment – non-binding and free of charge.