https://platformengineering.org logo
#general
Title
# general
b

Bishwa

02/22/2023, 4:26 PM
Hi All!! I'm running an open source IAC scanning tool called checkov (written in Python). At the moment, I'm looking to make my IAC scans faster. I've already tried running checkov on pypy(JIT) and I don't see much improvement in speed. Can anyone recommend alternatives? Thanks in advance.
g

George Fahmy

02/22/2023, 4:32 PM
what kind of IaC are you scanning? terraform? kubernetes manifests?
when do you run the scanning tools? pre-commit hooks? in a CI pipeline?
b

Bishwa

02/22/2023, 4:43 PM
Hey George, I'm scanning terraform and kubernetes manifests and I'm running it in a Jenkins pipeline.
g

George Fahmy

02/22/2023, 4:47 PM
if scanning is still slow, you can try shift-left by building secure re-usable modules, scan these modules and let developers consume them as hardened building blocks
62 Views