Hi All!! I'm running an open source IAC scanning t...
# general
b
Hi All!! I'm running an open source IAC scanning tool called checkov (written in Python). At the moment, I'm looking to make my IAC scans faster. I've already tried running checkov on pypy(JIT) and I don't see much improvement in speed. Can anyone recommend alternatives? Thanks in advance.
g
what kind of IaC are you scanning? terraform? kubernetes manifests?
when do you run the scanning tools? pre-commit hooks? in a CI pipeline?
b
Hey George, I'm scanning terraform and kubernetes manifests and I'm running it in a Jenkins pipeline.
g
if scanning is still slow, you can try shift-left by building secure re-usable modules, scan these modules and let developers consume them as hardened building blocks