A starter template for running Terraform and Checkov in Azure
Install Checkov with:
$ pip install checkov
On the example_storage_account/src
folder, create the tfplan with the input variable environment
set to dev
:
$ terraform init && terraform plan --var environment=dev --out terraform.tfplan.binary
Convert the binary tfplan to JSON with:
$ terraform show --json terraform.tfplan.binary | jq '.' > terraform.tfplan.json
On the example_storage_account
folder, run Checkov with the plan and custom policies with:
$ checkov -f src/terraform.tfplan.json --external-checks-dir policies