checkov-vscode icon indicating copy to clipboard operation
checkov-vscode copied to clipboard

Checkov Integration Setup Documentation Is Out of Date

Open AlexAtkinson opened this issue 1 year ago • 4 comments

Since the implementation of the redirect from bridgecrew.cloud to prismacloud, the documentation for setting up an API token is incorrect. Please update to include the new direction on acquiring an API token.

Documentation: https://marketplace.visualstudio.com/items?itemName=Bridgecrew.checkov Broken Integration link: https://www.bridgecrew.cloud/integrations/api-token

It's not immediately clear whether or not checkov is now paywalled (beyond the 7 day free trial), and it's excruciating to have to wait for a "Palo Alto Networks specialist to reach out to me" before I can get an account and API token setup. I hope this isn't the case.

Thanks, Alex

AlexAtkinson avatar Feb 06 '24 20:02 AlexAtkinson

Hi @AlexAtkinson thanks for pointing this out! We'll update this listing.

Bridgecrew has been merged into Prisma Cloud by Palo Alto Networks and so to use this extension, you will need a valid Prisma Cloud Access Key. Checkov by itself is still open source to use.

tsmithv11 avatar Feb 07 '24 05:02 tsmithv11

Redirecting the users from Checkov or other Bridgecrew products to the PrismaCloud website without any information is not the way to keep the community. Having no preparation to make this move (documentation of Checkov or the VSCode extension) before the redirection, it feels like PrismaCloud will kill Checkov. That's weird! They don't want to keep the community behind Checkov?

timoa avatar Feb 07 '24 08:02 timoa

We appreciate the feedback, @timoa. Certainly this is not the experience we want you to have. Rest assured that Checkov as an open source tool is and will remain open source and well supported.

In regards to Bridgecrew, the Bridgecrew site has had a deprecation banner up for a few months announcing the deprecation of bridgecrew.cloud. This marketplace documentation was missed, but we'll get it updated as well.

tsmithv11 avatar Feb 07 '24 11:02 tsmithv11

@tsmithv11 Shouldn't you have change this extension's entry on VS Code extensions page switched from 'FREE' to Trial /Paid, or maybe have the extension removed altogether from there until this change is complete? The current status is misleading.

image

RoFz avatar Feb 13 '24 14:02 RoFz