CyberStrikeAI/tools/checkov.yaml

name: "checkov"
command: "checkov"
enabled: true

short_description: "基础设施即代码安全扫描工具"

description: |
  Checkov是一个静态代码分析工具，用于基础设施即代码（IaC）的安全扫描。
  
  **主要功能：**
  - 支持多种IaC框架（Terraform, CloudFormation, Kubernetes等）
  - 数百个内置策略
  - 自定义策略支持
  - CI/CD集成
  
  **使用场景：**
  - IaC安全扫描
  - 云配置审计
  - 安全策略检查
  - 合规性检查

parameters:
  - name: "directory"
    type: "string"
    description: "要扫描的目录"
    required: false
    flag: "-d"
    format: "flag"
    default: "."
  
  - name: "framework"
    type: "string"
    description: "要扫描的框架（terraform, cloudformation, kubernetes等）"
    required: false
    flag: "--framework"
    format: "flag"
  
  - name: "check"
    type: "string"
    description: "要运行的特定检查"
    required: false
    flag: "--check"
    format: "flag"
  
  - name: "output_format"
    type: "string"
    description: "输出格式（json, yaml, cli）"
    required: false
    flag: "--output"
    format: "flag"
    default: "json"