Palo Alto Networks

Checkov

Checkov 3.0: Upgraded Open-Source Infrastructure-as-Code Security

Version 3.0 of Checkov — Prisma Cloud’s open-source infrastructure-as-code (IaC) security scanner — is now available. Checkov 3.0 is a result of over 11 thousand new commits since we released Checkov 2.0 and includes upgrades, such as improved graph policies, deeper Terraform scanning and support for new frameworks.

Checkov enables developers to identify and remediate misconfigurations in infrastructure-as-code files across platforms, such as Terraform, Kubernetes...

Code Security

DevSecOps

Oct 25, 2023

By Matt Johnson

Palo Alto Networks

Products and Services

Partners

AppSec, DevSecOps

OpenID Connect: Let’s Talk Security

OpenID Connect (OIDC) is a modern authentication and authorization protocol built on top of the 0Auth 2.0 framework. OIDC enables secure and standardized authentication in applications, particularly web and mobile applications.

Sep 12, 2023

By Steve Giguere

DevSecOps, Secure the Cloud

ChatGPT and Checkov: Fix IaC Security Issues Fast

Infrastructure as code (IaC) offers a robust method for managing cloud resources. Developers use IaC to describe their infrastructure in code format, which can then undergo versioning, testing and deployment li...

Jun 27, 2023

By Steve Giguere

Application Security, DevSecOps

Shift Left Secrets Security: How to Prioritize Secrets Risks

As you start developing your secrets security strategy, it’s likely that GitHub repositories’ secrets aren’t top of mind. GitHub — unarguably the de f...

Jun 01, 2023

By Steve Giguere

Code Security, DevSecOps

Full-Stack Code Visibility With Prisma Cloud Software Bill of Materials (SB...

When Log4Shell was first reported, companies scrambled to figure out if and how they were affected by the vulnerability. Despite their best efforts, few companies were able to full...

Oct 05, 2022

By Taylor Smith

Cloud Computing, DevSecOps

5 Tips for Securely Adopting Infrastructure as Code

Infrastructure as code (IaC) allows us to design, build, deploy and manage cloud infrastructure in code, rather than clicking through a cloud provider’s UI or having a long list of CLI commands. IaC—especially...

Aug 23, 2022

By Taylor Smith

Cloud Workload Protection Platform, DevSecOps

Announcing Checkov 2.0: Deepening Open Source IaC Security

The Bridgecrew team is excited to announce the release of Checkov 2.0, further enhancing one of the most popular open source IaC security scanners ava...

Apr 08, 2021

By Matt Johnson

Load more blogs