Checkov

Output Commands

Output results in JSON, SARIF, JUnit, and other formats for CI integration.

11 commands

Pro Tips

Use --output sarif for GitHub Advanced Security integration

Commands

JSON output

$ checkov -d . -o json

Output results as JSON.

SARIF output

$ checkov -d . -o sarif > results.sarif

Output in SARIF format.

JUnit XML

$ checkov -d . -o junitxml > results.xml

Output as JUnit XML.

Compact output

$ checkov -d . --compact

Show compact output.

Soft fail

$ checkov -d . --soft-fail

Exit 0 even with failures.

Output to file

$ checkov -d . -o json --output-file-path results/

Write output to a directory.

CSV output

$ checkov -d . -o csv > results.csv

Output results as CSV.

Multiple outputs

$ checkov -d . -o cli -o json --output-file-path console,results.json

Output to console and JSON file.

Prisma Cloud integration

$ checkov -d . --bc-api-key PRISMA_API_KEY::PRISMA_API_SECRET --repo-id org/repo

Send results to Prisma Cloud.

Hard fail on severity

$ checkov -d . --hard-fail-on CRITICAL,HIGH

Fail only on critical/high findings.

Soft fail on severity

$ checkov -d . --soft-fail-on LOW,MEDIUM

Soft fail on low/medium findings.