bridgecrewio / checkov

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
https://www.checkov.io/
Apache License 2.0
7.1k stars 1.12k forks source link

Cannot use Checkov VSCode extension - Cannot obtain API token #6743

Closed dbhaigh closed 1 month ago

dbhaigh commented 1 month ago

https://bridgecrew.cloud now points to https://www.prismacloud.io/

The option to create an account or the API token needed to enable the Checkov extension in VSCode does not appear to exist

How does one obtain the API token now? And if the API token is no longer available? Is there an available workaround?

-=A=-

.

ChananM commented 1 month ago

Hi @dbhaigh, You can refer to this technical document to see how you can create API keys so you can use them in the VS Code extension. If you encounter any issues during this process please don't hesitate to contact your support representative. If you wish to use the VS Code extension without using an API key (I.E, native Checkov execution) the extension does support it.

dbhaigh commented 1 month ago

This isn't closed

The tech doc you link talks about "You can enable API access either when you Add Administrative Users On Prisma Cloud" I don't want to use Prisma Cloud, I only want to use the Checkov extension in VSCode

And you mention that the extension supports the ability to NOT use the API key? It does? How? I see nothing in the documentation that says this - All I am finding are directions informing me to create a free account on a website that no longer exists

If there is a way to remove the requirement for the Bridgecrew Community Account (in order to get the API Token)? I'm certain that I'm not the only person who would like to know how to accomplish this

-=A=-

.

ChananM commented 1 month ago

Hi @dbhaigh I'm sorry I misunderstood your situation. I assume you are using the old Checkov VS Code extension. Please use the new Prisma Cloud extension that can work without Prisma API keys, in which case it will run native Checkov. Native Checkov supports IaC and some secrets scans, and requires a Prisma Cloud account to enable additional features