iac

Run an Infrastructure-as-Code (IaC) scan

Synopsis

Run an Infrastructure-as-Code scan (e.g. checkov) against a repository or path and upload SARIF results to DevGuard.

This command scans Terraform, CloudFormation, Kubernetes manifests, and other IaC files for security issues and misconfigurations.

Any flags after a "--" separator are forwarded verbatim to the underlying checkov invocation. See the checkov CLI reference for available flags: https://www.checkov.io/2.Basics/CLI%20Command%20Reference.html

Examples

Options

Options inherited from parent commands

Have feedback? We want to hear from you!

Fields marked with * are required