Checkov in windows - terraform

Can checkov-satic code analysis for infrastructure as a tool can be installed or not?
I checked the documentation. It has mentioned the steps for Unix, but not for windows

you should be able to install it on windows or use the docker packing to gain similar results.
If you have any issue, feel free to reach out at https://slack.bridgecrew.io/
Barak, The creator of checkov

Related

Official Android Studio repository?

I found this tutorial for installing Android Studio on Linux: https://linuxhint.com/install_android_studio_ubuntu/
It says:
In this step, you will need to add the official Android repository to the source list of your system. To do this, enter the following command in the terminal window:
$ sudo add-apt-repository ppa:maarten-fonville/android-studio
It declares maarten-fonville/android-studio as the "official Android repository".
I couldn't find references to this PPA from Google's official documentation. It's also not mentioned in the Android Studio download page: https://developer.android.com/studio .
I found this page: https://launchpad.net/~maarten-fonville , and looking at the description and content, I saw no indication that it belonged to or was affiliated with Google or JetBrains.
I have no reason to believe that there is anything wrong with that PPA; in fact, I even used it successfully in a VM. But I am reluctant to use non-official repositories on my main machine, for security reasons.
How can I verify that this PPA is indeed "official" and approved (and/or monitored?) by either Google or JetBrains?
The repository isn't mentioned as official. You can try other methods to install AS on Linux if you're not sure
Option 1: https://linuxconfig.org/how-to-install-android-studio-on-ubuntu-20-04-focal-fossa-linux
Option 2: https://developer.android.com/studio#downloads
AS is free and distributed as an archive...so always chances of multiple copies on the internet. Doesn't necessarily mean they are wrong.

How do I use 7zip in a .NET Core app running on Linux?

We've got a .NET Core app that was hosted in Azure Service Fabric. Now we are moving it to Linux-based Docker containers.
We need to be able to create 7zip archives for an external service (one of those fancy "drop your files here via ftp" interfaces which requires 7zip archives).
Until now we could use a CLI wrapper ported from .NET Framework to .NET Core. But that does no longer work once we switch to a Linux environment.
We can't change the external service (because it is not ours) and we don't want to use Windows-based Docker containers.
There is a large number of 7zip NuGet packages for .NET Framework. Very few for .NET Core (mostly outdated and no longer maintained). And none I could find for .NET Core on Linux.
Do you have any suggestions on how we could solve that issue?
UPDATE: I found one similar question among the open issues of the SevenZipSharp project. Sadly there is no solution included.
UPDATE 2: Unfortunately we can't use an alternative implementation of the LZMA algorithm. Our 3rd party requires archives in the .7z format :-(
This is not an answer as it doesn't really provide a solution to the question, but it does address why it unlikely there will come an updated 7Zip library for Linux and address the problem with a good LZMA OS-cross-platform compression engine. So it should be seen as a long Comment, I hope it's okay.
It seems 7Zip is not maintained on Linux at all, current library is rather old, and I don't trust it's compatibility with the current and newer Windows 7Zip versions, so in my view 7Zip on Linux is a no-go. It's my understanding that Igor Pavlov (creator and maintainer of Zip) only target Windows. And he's not the creator of the current and old Linux 7Zip library.
A LZMA compression engine with both Linux and Windows support is LZip (.lz).
The latest library (zlib) is 1.11 and in July 2019 I sent a request to Domani Hannes to compile a new Windows version and he was to kind to reply with a download link and the following message:
I just now built plzip-1.8 with lzlib-1.11 and mingw-w64-winpthreads-v6.0.0.
There are no longer modifications necessary to be able to compile for Windows, so it's pretty straightforward.
I guess it mean it's easy to compile newer Windows versions in the future too.
Download link to this binary: plzip_zlib_1.11.exe.
I haven't have time to test it thoroughly yet for my own project, so if anyone go down this path please share your experiences (with a risk of hijacking this thread, so maybe not :-P).

How to install Google Sandbox2 on linux

Can someone guide me through a set procedure on installing and using google sandbox2 API on Ubuntu 16.04 .
The documentation on google developers is not helping me.
One of the developers of Sandboxed API here. Can you be a bit more specific on what you tried and what you would like to know?
As for your setup, we recommend you use a newer version of Ubuntu, such as 19.04 or a recent Debian.
Finally, if you want to add sandboxing to an existing open source project, you may be eligible for the Patch Rewards Program, if upstream accepts your changes (Google "Patch Rewards Program").

How can i publish my software to public linux repos to be available with "apt" installers etc

I have developed (free) software, more precisely, a development environment or a code editor called "Lines". On the web I have set up installation packages for Windows and Linux, but I would like the application to be available as an "apt" package on linux systems. The easiest way to do this (and not get tired) is?
By the way, software and installation packages are available at https://creatixbih.com/lines/
Thank you.
Since I'm not really a "linux" guru, I've been trying to find an automated solution.
First you need to create a DEB package, you can read more about it here.
The easiest way to get your package into huge repositories would be to submit your package to Debian, where Ubuntu is based off. A detailed explanation can be found here.
Another good method would be to host your OWN apt repository which is being explained here

Run Google Native Client (nacl_sdk) on Samsung Chromebook

I was trying to follow the the installation tutorial of the Native Client SDK found here. However, my Samsung Chromebook (in developer mode) does not want to run ./naclsdk (chmod +x done), but instead returns the following:
32-bit runtime environment was not found on this
system. Specifically the 32-bit dynamic loader which is needed by the NaCl
compilers was not found ('/lib/ld-linux.so.2'). On modern debian/ubuntu
systems this is included in the 'libc6:i386' package.
On here they write that the PNaCl should run on ARM computers, however, on some other forums I read that wasn't the case. I've tried enabling two flags, as described on a site which I can't post due to a lack of reputation, but it looks like that'll only change things when using PNaCl, not during the installation of the SDK.
Is it possible to install that SDK on my Chromebook and, if so, how?
There's a bit of confusion: when the documentation says "PNaCl and NaCl work on ARM", it means the part that runs inside of Chrome which users would use. The SDK is currently only built for x86-64 Windows/Linux/OSX, and not for ARM. The main reason is that it's never been requested, probably because ARM machines are quite slow compared to usual development machines.
That being said, I don't think it's silly to use ARM as a development machine, and I've built my own PNaCl toolchain for ARM in the past. There are build instructions for the toolchain. I haven't built it recently, and it may have bitrotted a bit so if you run into issues I suggest emailing the team or better yet sending a patch! I expect any issue to be fairly minor, especially if you only want to use pnacl-clang or nacl-clang (as opposed to the GCC toolchain).

Resources