Checkov Integration Setup Documentation Is Out of Date

[AlexAtkinson]

Since the implementation of the redirect from bridgecrew.cloud to prismacloud, the documentation for setting up an API token is incorrect. Please update to include the new direction on acquiring an API token.

Documentation: https://marketplace.visualstudio.com/items?itemName=Bridgecrew.checkov
Broken Integration link: https://www.bridgecrew.cloud/integrations/api-token

It's not immediately clear whether or not checkov is now paywalled (beyond the 7 day free trial), and it's excruciating to have to wait for a "Palo Alto Networks specialist to reach out to me" before I can get an account and API token setup. I hope this isn't the case.

Thanks,
Alex

[tsmithv11]

Hi @AlexAtkinson thanks for pointing this out! We'll update this listing.

Bridgecrew has been merged into Prisma Cloud by Palo Alto Networks and so to use this extension, you will need a valid Prisma Cloud Access Key. Checkov by itself is still open source to use.

[timoa]

Redirecting the users from Checkov or other Bridgecrew products to the PrismaCloud website without any information is not the way to keep the community.
Having no preparation to make this move (documentation of Checkov or the VSCode extension) before the redirection, it feels like PrismaCloud will kill Checkov. That's weird! They don't want to keep the community behind Checkov?

[tsmithv11]

We appreciate the feedback, @timoa. Certainly this is not the experience we want you to have. Rest assured that Checkov as an open source tool is and will remain open source and well supported.

In regards to Bridgecrew, the Bridgecrew site has had a deprecation banner up for a few months announcing the deprecation of bridgecrew.cloud. This marketplace documentation was missed, but we'll get it updated as well.

[RoFz]

@tsmithv11 Shouldn't you have change this extension's entry on VS Code extensions page switched from 'FREE' to Trial /Paid, or maybe have the extension removed altogether from there until this change is complete?
The current status is misleading.

[dbhaigh]

This is still a problem

[AurimasNav]

Given the current circumstances it might be a proper place to ask for alternative recommendations.

[tsmithv11]

The new Prisma Cloud plugin doesn't require an API Key and uses Checkov: https://marketplace.visualstudio.com/items?itemName=PrismaCloud.prisma-cloud

The Checkov extension will be moved to deprecated in the future.

[dbhaigh]

I've found that the Prisma extension doesn't work And shouldn't you have deprecated the Checkov extension at least 6 months ago? Seriously people, get your ""stuff" " together!

…

On Tue, 1 Oct 2024, 17:36 Taylor, ***@***.***> wrote: The new Prisma Cloud plugin doesn't require an API Key and uses Checkov: https://marketplace.visualstudio.com/items?itemName=PrismaCloud.prisma-cloud The Checkov extension will be moved to deprecated in the future. — Reply to this email directly, view it on GitHub <#141 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ARAYJJP4I6SKJC4O36TK6WDZZLFPLAVCNFSM6AAAAABPDCWEFSVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDGOBWGQ3TQMJWHE> . You are receiving this because you commented.Message ID: ***@***.***>