11-03-2023 08:51 AM - edited 11-06-2023 02:53 AM
We had issues with secret scanning output in checkov (see https://live.paloaltonetworks.com/t5/prisma-cloud-discussions/checkov-secrets-framework-scanning-exp... )
However, if checkov natively supported TerraGrunt, then we wouldn't need to output the terraform plan to a file for checkov to be able to scan it, and therefore the secrets would not be visible if they are protected via a Sensitive flag.
We raised a feature request (See here - Checkov should support | Prisma Cloud New Features Request Portal (aha.io)).
However, as votes are normalised by customer, 1 vote from us vs 100 votes from us is still 1 vote - so if you also think that our enhancement request should be prioritised, please upvote the above linked Feature Request.
Thanks,
Graham
11-07-2023 08:35 PM
Hi @GrahamGoldENG ,
I would also recommend posting to the General Topics area. This could increase visibility with a wider range of users. Another avenue you can use if posting to the Palo Alto Networks Reddit. This isn't officially owned by Palo Alto, but there is great engagement and visibility there.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
