Title here
Summary here
Checkov Report
File Types
DefectDojo parser accepts Checkov scan data as a .JSON file.
JSON files can be created from the Checkov CLI: https://www.checkov.io/2.Basics/CLI%20Command%20Reference.html
Acceptable JSON Format
{
"check_type": "terraform",
"results": {
"passed_checks": [
],
"failed_checks": [
{
"check_id": "CKV_AZURE_41",
"check_name": "Ensure the key vault is recoverable",
"check_result": {
"result": "FAILED"
},
"code_block": [
],
"file_path": "file_path",
"file_line_range": [
1,
16
],
"resource": "azurerm_key_vault.main",
"check_class": "checkov.terraform.checks.resource.azure.KeyvaultRecoveryEnabled",
"guideline": "https://docs.bridgecrew.io/docs/ensure-the-key-vault-is-recoverable"
},
...
],
"skipped_checks": [],
"parsing_errors": []
},
"summary": {
"passed": 0,
"failed": 2,
"skipped": 0,
"parsing_errors": 0,
"checkov_version": "1.0.467"
}
}Sample Scan Data
Sample Checkov scans can be found here.