Checkov Integrations

Google Cloud is an online service that lets you create everything from simple websites to complex apps for businesses of any size. Customers who are new to the system will receive $300 in credits for testing, deploying, and running workloads. Customers can use up to 25+ products free of charge. Use Google's core data analytics and machine learning. All enterprises can use it. It is secure and fully featured. Use big data to build better products and find answers faster. You can grow from prototypes to production and even to planet-scale without worrying about reliability, capacity or performance. Virtual machines with proven performance/price advantages, to a fully-managed app development platform. High performance, scalable, resilient object storage and databases. Google's private fibre network offers the latest software-defined networking solutions. Fully managed data warehousing and data exploration, Hadoop/Spark and messaging.

AWS offers a wide range of services, including database storage, compute power, content delivery, and other functionality. This allows you to build complex applications with greater flexibility, scalability, and reliability. Amazon Web Services (AWS), the world's largest and most widely used cloud platform, offers over 175 fully featured services from more than 150 data centers worldwide. AWS is used by millions of customers, including the fastest-growing startups, large enterprises, and top government agencies, to reduce costs, be more agile, and innovate faster. AWS offers more services and features than any other cloud provider, including infrastructure technologies such as storage and databases, and emerging technologies such as machine learning, artificial intelligence, data lakes, analytics, and the Internet of Things. It is now easier, cheaper, and faster to move your existing apps to the cloud.

Kubernetes (K8s), an open-source software that automates deployment, scaling and management of containerized apps, is available as an open-source project. It organizes containers that make up an app into logical units, which makes it easy to manage and discover. Kubernetes is based on 15 years of Google's experience in running production workloads. It also incorporates best-of-breed practices and ideas from the community. Kubernetes is built on the same principles that allow Google to run billions upon billions of containers per week. It can scale without increasing your operations team. Kubernetes flexibility allows you to deliver applications consistently and efficiently, no matter how complex they are, whether you're testing locally or working in a global enterprise. Kubernetes is an open-source project that allows you to use hybrid, on-premises, and public cloud infrastructures. This allows you to move workloads where they are most important.

Jenkins, the most popular open-source automation server, provides hundreds of plugins that can be used to build, deploy, and automate any project. Jenkins is an extensible automation server that can be used to create CI servers or become the continuous delivery hub for any project. Jenkins is a Java-based program that can be run straight out of the box. It includes packages for Windows, Linux and macOS, as well as other Unix-like operating system packages. Jenkins is easy to set up and configure via its web interface. It also includes built-in help and on-the-fly error checking. Jenkins can be integrated with almost every tool in the Continuous Integration and Continuous Delivery toolchain thanks to the hundreds of plugins available in the Update Center. Jenkins' plugin architecture allows for almost unlimited possibilities. Jenkins makes it easy to distribute work across multiple machines. This helps drive builds, tests, and deployments across multiple platforms more quickly.

Definitive functions are the heart of extensible programming. Python supports keyword arguments, mandatory and optional arguments, as well as arbitrary argument lists. It doesn't matter if you are a beginner or an expert programmer, Python is easy to learn. Python is easy to learn, whether you are a beginner or an expert in other languages. These pages can be a helpful starting point to learn Python programming. The community hosts meetups and conferences to share code and much more. The documentation for Python will be helpful and the mailing lists will keep in touch. The Python Package Index (PyPI), hosts thousands of third-party Python modules. Both Python's standard library and the community-contributed modules allow for endless possibilities.

GitHub is the most trusted, secure, and scalable developer platform in the world. Join millions of developers and businesses who are creating the software that powers the world. Get the best tools, support and services to help you build with the most innovative communities in the world. There's a free option for managing multiple contributors: GitHub Team Open Source. We also have GitHub Sponsors that help you fund your work. The Pack is back. We have partnered to provide teachers and students free access to the most powerful developer tools for the school year. Work for a government-recognized nonprofit, association, or 501(c)(3)? Receive a discount Organization account through us.

GitLab is a complete DevOps platform. GitLab gives you a complete CI/CD toolchain right out of the box. One interface. One conversation. One permission model. GitLab is a complete DevOps platform, delivered in one application. It fundamentally changes the way Security, Development, and Ops teams collaborate. GitLab reduces development time and costs, reduces application vulnerabilities, and speeds up software delivery. It also increases developer productivity. Source code management allows for collaboration, sharing, and coordination across the entire software development team. To accelerate software delivery, track and merge branches, audit changes, and enable concurrent work. Code can be reviewed, discussed, shared knowledge, and identified defects among distributed teams through asynchronous review. Automate, track, and report code reviews.

Bitbucket goes beyond Git code management. Bitbucket is a place for teams to plan projects, collaborate on code and test, and then deploy. For small teams of less than 5, Bitbucket is free. Premium plans ($6/user/mo), and Standard ($3/user/mo), are available at scale. You can organize your projects by creating Bitbucket branches from Jira issues and Trello cards. Integrated CI/CD allows you to build, test, and deploy. Configuration as code allows for fast feedback loops and benefits. Pull requests make it easier to approve code reviews. With inline comments, create a merge list with the designated approvers. Bitbucket Pipelines with CI/CD lets you build, test, and deploy with integrated CI/CD. You can benefit from configuration as code and quick feedback loops. With IP whitelisting, 2-step verification and IP whitelisting, you can be sure that your code is safe in the Cloud. You can restrict access to certain users and control their actions by granting branch permissions and merging checks to quality code.

Microsoft Azure is a cloud computing platform that allows you to quickly develop, test and manage applications. Azure. Invent with purpose. With more than 100 services, you can turn ideas into solutions. Microsoft continues to innovate to support your development today and your product visions tomorrow. Open source and support for all languages, frameworks and languages allow you to build what you want and deploy wherever you want. We can meet you at the edge, on-premises, or in the cloud. Services for hybrid cloud enable you to integrate and manage your environments. Secure your environment from the ground up with proactive compliance and support from experts. This is a trusted service for startups, governments, and enterprises. With the numbers to prove it, the cloud you can trust.

AWS CloudFormation allows you to create resource templates. These templates can be used to specify a set AWS resources to provision. These templates allow you to easily duplicate your infrastructure quickly and easily, as well as version control it.

Fully-featured IDE that allows you to code, debug and test on any platform. Code faster. Work smarter. The best-in-class IDE helps you create the future. From initial design to final deployment, you can develop with the entire toolset. IntelliSense performance improved for C++ files. Local development using many common emulators. Solution Explorer simplifies test access. Git management and repo creation within the IDE. Microsoft Azure workload now includes Kubernetes support

Terraform is an open source infrastructure as code software tool. It provides a consistent CLI workflow for managing hundreds of cloud services. Terraform codifies cloud APIs into declarative configuration files. Write infrastructure as code using declarative configuration files. The HashiCorp Configuration Language allows for concise descriptions using blocks, arguments and expressions of resources. Run terraform plan before you provision or change infrastructure. To achieve the desired configuration state, apply changes to hundreds cloud providers using terraform. To manage the entire lifecycle of infrastructure, define it as code. Create new resources, manage existing ones, destroy those that are no longer needed.

Helm is a tool that helps you manage Kubernetes apps. Helm charts can help you create, modify, and upgrade any Kubernetes app. Charts are simple to create, modify, share, publish, and update. Charts can be used to describe complex apps, make it easy to install the application again and act as a single point for authority. With custom hooks and in-place upgrades, you can take the hassle out of updating. Charts can be easily authored, shared, and hosted on public or private servers. You can use helm rollback to easily roll back to an older release. Helm uses a packaging format called charts. A chart is a collection or files that describes a set of Kubernetes resource. One chart can be used to deploy a simple thing like a memcached container or a complex web app stack that includes HTTP servers, databases, caches and more.

YAML allows you to declare AWS Lambda functions as well as their triggers using simple abstract syntax. AWS Lambda functions and triggers, as well as code, will be automatically deployed and wired together in cloud. Install thousands of Serverless Framework plugins to create new serverless use cases on AWS. You can track usage, performance, and errors of your serverless applications with powerful, instant metrics. All serverless apps and their resources can be viewed in one place, regardless if they are located in the same region or AWS account. You can easily share secrets and outputs from serverless applications, and delegate AWS account accessibility. The Serverless Framework allows you to deploy many of your most familiar use-cases immediately. You can use the Serverless Framework to create REST APIs in Node.js and Python. Go, Java or GraphQL APIs. Scheduled tasks, Express.js apps, and front-end software are all possible.

YAML: YAML Isn't Markup Language™. YAML is a human-friendly data Serialization Language for all Programming Languages.

Through Application Security Posture Management (ASPM), Enso's platform easily deploys into an organization’s environment to create an actionable, unified inventory of all application assets, their owners, security posture and associated risk. With Enso Security, AppSec teams gain the capacity to manage the tools, people and processes involved in application security, enabling them to build an agile AppSec without interfering with development. Enso is used daily AppSec teams small and large across the globe. Get in touch for more information!

Kondukto's flexible platform design allows you create custom workflows to respond to risks quickly and effectively. You can use more than 25 open-source tools to perform SAST, SCA and Container Image scans in minutes, without the need for updates, maintenance or installation. Protect your corporate memory against changes in employees, scanners or DevOps Tools. You can own all security data, statistics and activities. When you need to change AppSec tools, avoid vendor lockout or data loss. Verify fixes automatically for better collaboration and less distracting. Eliminate redundant conversations between AppSec teams and development teams to increase efficiency.

Get granular insight into engineering technologies, systems and processes, from code to deployment. Connect Cider to your ecosystem easily and seamlessly integrate security without interrupting engineering. Based on a set prioritized risks and recommendations that are specific to your environment, optimize your CI/CD security. Cider seamlessly integrates to all systems in your CI/CD. It provides a detailed and accurate analysis of all technologies and frameworks that exist in the environment. Cider maps all intelligent connections in your environment to provide end-to-end visibility across the entire CI/CD journey from SCM user to artifact deployed to production. Assess the state of your engineering systems. Analyze your environment in realistic attack scenarios to identify controls that can reduce your CI/CD attack surface.

OWASP CycloneDX (SBOM standard) is a lightweight Software Bill of Materials. It is intended for use in supply chain component analysis and application security contexts. The CycloneDX Core group manages the specification's strategic direction and maintenance. It is a OWASP community-based group. It is crucial to have a complete inventory of all components, first-party and second-party, in order to identify risk. Ideal BOMs should contain all transitive and direct components as well as the dependencies between them. CycloneDX adoption allows organizations to quickly meet these minimum requirements, and then mature into more complex use cases. CycloneDX can meet all requirements of the OWASP Software Component Verification Standard, (SCVS).