With its new Visual Studio Code (VS Code) extension, Checkov will automatically prompt the developer if code does not meet policy requirements, is misconfigured or demonstrates other security anomalies, the company claims. Bridgecrew says these automated notifications reach developers at the “earliest possible moment,” while they are writing code on their own machines before it is uploaded to git, for example.

Read full article on The New Stack