wolfi-dev / os

Main package repository for production Wolfi images
Other
821 stars 249 forks source link

checkov package is not usable #6715

Closed tuananh closed 7 months ago

tuananh commented 1 year ago

What I did

docker run -it --rm cgr.dev/chainguard/wolfi-base
apk add checkov
checkov

I got the following error

cd08f75ce732:/# checkov
Traceback (most recent call last):
  File "/usr/bin/checkov", line 2, in <module>
    from checkov.main import Checkov
ModuleNotFoundError: No module named 'checkov'

Tagging @ahmetak4n

ahmetak4n commented 1 year ago

Hi @tuananh I will check it 🙏

rawlingsj commented 1 year ago

This might be related to a python 3.12 update that's happening. Sorry about this, investigating also.

ahmetak4n commented 1 year ago

I'm try to 3.11 thanks for the info @rawlingsj 🙏 . I think the problem related argcomplete package 🤔

vaikas commented 1 year ago

I got confused it was complaining during the install, my bad. Looking into it.

ahmetak4n commented 1 year ago
image

It worked with python 3.12. I need to find a clean way for adding that the required dependencies. fyi

ahmetak4n commented 1 year ago

Could I suggest remove the checkov until release a stable version of checkov3 https://github.com/bridgecrewio/checkov3 @tuananh.?

tuananh commented 1 year ago

not a problem for me. can't say for others.

i thought v3 is already released https://github.com/bridgecrewio/checkov/releases/tag/3.0.19

ahmetak4n commented 1 year ago

Checkov3 different repository and it has not contain any release https://github.com/bridgecrewio/checkov3 🙏

tuananh commented 1 year ago

@ahmetak4n looks like he forked from checkov repo and worked on it for awhile.

but now it's merged back to main repo already: 1900 commits behind origin repo

image

ahmetak4n commented 1 year ago

I committed a fix for checkov. #8081

ahmetak4n commented 11 months ago

Hi @tuananh, new commits was approved, fyi 🙏