# core/adapters/tool.checkov.adapter.ts

> 26 lines of code and 8 definitions.

Tree: GovLab Quality
Language: typescript
Layer: infrastructure
Canonical: https://banes-lab.com/anatomy/quality#file-quality-core-adapters-tool-checkov-adapter-ts
Source text: https://banes-lab.com/source/quality/core/adapters/tool.checkov.adapter.ts.txt

Listed in [core/adapters](https://banes-lab.com/api/source/quality/core/adapters.md), after [core/adapters/tool.brakeman.adapter.ts](https://banes-lab.com/source/quality/core/adapters/tool.brakeman.adapter.ts.md) and before [core/adapters/tool.checkstyle.adapter.ts](https://banes-lab.com/source/quality/core/adapters/tool.checkstyle.adapter.ts.md).

## Definitions

- `runCheckov` (lexical_declaration, line 16)
- `TOOL` (lexical_declaration, line 13)
- `DEFAULTS` (lexical_declaration, line 14)
- `{ command }` (lexical_declaration, line 17)
- `{ bin, prefix }` (lexical_declaration, line 18)
- `advisory` (lexical_declaration, line 19)
- `spec` (lexical_declaration, line 20)
- `args` (lexical_declaration, line 24)

## Contained in

- [core/adapters](https://banes-lab.com/anatomy/quality/folder-quality-core-adapters.md)

## Uses

- [core/adapters/tool.adapter.ts](https://banes-lab.com/source/quality/core/adapters/tool.adapter.ts.md)
- [core/resolvers/scope.resolver.ts](https://banes-lab.com/source/quality/core/resolvers/scope.resolver.ts.md)

## Linked from

- [core/adapters](https://banes-lab.com/anatomy/quality/folder-quality-core-adapters.md)
- [core/resolvers](https://banes-lab.com/anatomy/quality/folder-quality-core-resolvers.md)

## Source

```typescript
import { passTool, scanTargets, standardScan } from "#core/adapters/tool.adapter";
import type { RunResult } from "#types/finding.types";
import type { RunnerContext } from "#types/tool.types";
import { SUCCESS_STATUSES } from "#configuration/constants/tool.constants";
import { commandHint } from "#configuration/strings/tool.strings";
import { commandOf } from "#core/lexers/invocation.lexer";
import { defineTool } from "#core/registries/tool.registry";
import { parseCheckovOutput } from "#core/parsers/tool.checkov.parser";
import { scopeTargets } from "#core/resolvers/scope.resolver";
import { toolAdvisory } from "#core/factories/tool.factory";
import { toolSetting } from "#core/resolvers/tool.resolver";

const TOOL = "checkov";
const DEFAULTS = { command: "python -m checkov.main" };

const runCheckov = async function runCheckov(context: RunnerContext): Promise<RunResult> {
    const { command } = await toolSetting(context.root, TOOL, DEFAULTS);
    const { bin, prefix } = commandOf(command, TOOL);
    const advisory = toolAdvisory(context, TOOL, commandHint(TOOL, bin));
    const spec = standardScan(advisory, SUCCESS_STATUSES, (result) =>
        parseCheckovOutput(result.stdout, context.ecosystem),
    );
    return scanTargets(scopeTargets(context.root, context.paths), (target) => {
        const args = [...prefix, "-d", target, "-o", "json", "--compact", "--quiet", "--soft-fail"];
        return passTool(advisory, { args, bin, cwd: context.root }, spec);
    });
};

defineTool({ ecosystems: ["iac"], run: runCheckov, tool: TOOL });
```