This plugin has been deprecated. Upgrade to the latest and improved Prisma Cloud plugin for enhanced capabilities and security. Explore the new plugin here. Thank you for your continued support!
Checkov is a static code analysis tool for infrastructure-as-code.
The Checkov Plugin for Intellij enables developers to get real-time scan results, as well as inline fix suggestions as they develop cloud infrastructure.
The plugin is currently available for download directly from the IntelliJ Plugin Marketplace and its source code is available in an Apache 2.0 licensed repository.
Activating the plugin requires submission of a Prisma Cloud Access Key. It uses open Prisma Cloud to evaluate code and offer automated inline fixes. For more information about data shared with Prisma Cloud see the Disclaimer section below).
Plugin features include:
Using IDE built-in plugin system:
Settings/Preferences > Plugins > Marketplace > Search for "checkov" > Install Plugin
Manually:
Download the latest release and install it manually using Settings/Preferences > Plugins > ⚙️ > Install plugin from disk...
The Checkov plugin will invoke the latest version of Checkov
.
checkov:skip=<check_id>:<suppression_comment>
. For more details see the docs.To access checkov-intellij logs directory, go to Help
and select Show Log in Finder
(for macOS) or Show Log in Explorer
(for Windows).
Contribution is welcomed!
Start by reviewing the contribution guidelines. After that, take a look at a good first issue.
Looking to contribute new checks? Learn how to write a new check (AKA policy) here.
To use this plugin, you will need a Prisma Cloud account. The plugin uses Prisma Cloud's fixes API to analyse and produce code fixes, and enrich the results provided into the IDE. Please notice the Prisma Cloud privacy policy for more details. To generate fixes, files found to have triggered checkov violations are made available to the fixes API for the sole purpose of generating inline fixes code recommendations.
The plugin is based on the Jetbrains Platform Plugin Template.