bridgecrewio / checkov-vscode

Prevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework, and other infrastructure-as-code-languages with Checkov by Bridgecrew in your VSCODE IDE.
https://marketplace.visualstudio.com/items?itemName=Bridgecrew.checkov
Apache License 2.0
69 stars 37 forks source link

Checkov Integration Setup Documentation Is Out of Date #141

Open AlexAtkinson opened 9 months ago

AlexAtkinson commented 9 months ago

Since the implementation of the redirect from bridgecrew.cloud to prismacloud, the documentation for setting up an API token is incorrect. Please update to include the new direction on acquiring an API token.

Documentation: https://marketplace.visualstudio.com/items?itemName=Bridgecrew.checkov Broken Integration link: https://www.bridgecrew.cloud/integrations/api-token

It's not immediately clear whether or not checkov is now paywalled (beyond the 7 day free trial), and it's excruciating to have to wait for a "Palo Alto Networks specialist to reach out to me" before I can get an account and API token setup. I hope this isn't the case.

Thanks, Alex

tsmithv11 commented 9 months ago

Hi @AlexAtkinson thanks for pointing this out! We'll update this listing.

Bridgecrew has been merged into Prisma Cloud by Palo Alto Networks and so to use this extension, you will need a valid Prisma Cloud Access Key. Checkov by itself is still open source to use.

timoa commented 9 months ago

Redirecting the users from Checkov or other Bridgecrew products to the PrismaCloud website without any information is not the way to keep the community. Having no preparation to make this move (documentation of Checkov or the VSCode extension) before the redirection, it feels like PrismaCloud will kill Checkov. That's weird! They don't want to keep the community behind Checkov?

tsmithv11 commented 9 months ago

We appreciate the feedback, @timoa. Certainly this is not the experience we want you to have. Rest assured that Checkov as an open source tool is and will remain open source and well supported.

In regards to Bridgecrew, the Bridgecrew site has had a deprecation banner up for a few months announcing the deprecation of bridgecrew.cloud. This marketplace documentation was missed, but we'll get it updated as well.

RoFz commented 8 months ago

@tsmithv11 Shouldn't you have change this extension's entry on VS Code extensions page switched from 'FREE' to Trial /Paid, or maybe have the extension removed altogether from there until this change is complete? The current status is misleading.

image
dbhaigh commented 1 month ago

This is still a problem

AurimasNav commented 1 month ago

Given the current circumstances it might be a proper place to ask for alternative recommendations.

tsmithv11 commented 1 month ago

The new Prisma Cloud plugin doesn't require an API Key and uses Checkov: https://marketplace.visualstudio.com/items?itemName=PrismaCloud.prisma-cloud

The Checkov extension will be moved to deprecated in the future.

dbhaigh commented 1 month ago

I've found that the Prisma extension doesn't work

And shouldn't you have deprecated the Checkov extension at least 6 months ago?

Seriously people, get your ""stuff" " together!

On Tue, 1 Oct 2024, 17:36 Taylor, @.***> wrote:

The new Prisma Cloud plugin doesn't require an API Key and uses Checkov: https://marketplace.visualstudio.com/items?itemName=PrismaCloud.prisma-cloud

The Checkov extension will be moved to deprecated in the future.

— Reply to this email directly, view it on GitHub https://github.com/bridgecrewio/checkov-vscode/issues/141#issuecomment-2386478169, or unsubscribe https://github.com/notifications/unsubscribe-auth/ARAYJJP4I6SKJC4O36TK6WDZZLFPLAVCNFSM6AAAAABPDCWEFSVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDGOBWGQ3TQMJWHE . You are receiving this because you commented.Message ID: @.***>