static-analysis-checkov.md

Static Analysis

Option 2 - checkov

Documentation

https://github.com/bridgecrewio/checkov

Installation

apt install python3-pip
pip3 install checkov

Test manifest file

vi private-pod.yaml

apiVersion: v1
kind: Pod
metadata:
  name: privileged
spec:
  containers:
  - image: nginx
    name: test-pod
    securityContext:
      privileged: true

Performing static analysis

checkov -f private-pod.yaml