Shiftleft CICD Integration - Check Point CheckMates
Shiftleft CICD Integration
In this post, we are going to show how to integrate Shiflett into a modern CI/CD orchestrator like Gitlab. We will take the perspective of an application developer that integrates Shiftleft blades into the CI/CD pipeline and how it leverages Shiftleft information to start solving vulnerabilities detected in the code, container image that the pipeline builds as well as an infrastructure project that uses Terraform.
Shiftleft Modules
The following is a short description of Shiftleft modules also known as blades:
- code-scan: Using as input a directory that contains a Git repository, Shiftleft will scan it for vulnerabilities, weak coding practices, sensitive content, and malicious files among other categories.
- image-scan: Using as input a container image, compressed into a file, this blade will apply all the capabilities already provided by code-scan and will add on top of that the scanning of OS-level packages included in the container image.
- iac-assessment: In combination with CloudGuard, Infrastructure as code assessment allows users to apply policies to their Terraform projects. The mechanism to define those rules is by making use of CloudGuard Governance Specification Language (GSL). A high-level, human-friendly language.
Upcoming Events
Under the Hood - Check Point and Illumio – Modern Network Defense Against AI-Based Threats
Virtual
Tue 28 Jul 2026 @ 11:00 AM (EDT)AI Security Masters E12: READY OR NOT: Securing the AI Enterprise 4/5 - AI Gateway
In-Person
Tue 11 Aug 2026 @ 11:30 AM (EDT)
Community Interaction
Can shiftleft be used for on premise security or just cloud? We are using Kubernetes & podman on premise.
Response: Yes if you're running a locally hosted solution like Gitlab or Jenkins it can work there too - you just need to authenticate it against your CloudGuard solution.
Technical Details
Error Code: MEDIA_ERR_NETWORK
Technical details:
HLS playlist request error at URL: https://manifest.prod.boltdns.net/manifest/v1/hls/v4/clear/6058022097001/d4fb8e88-9198-419f-bc28-c0f60662bfa9/10s/master.m3u8?fastly_token=NmE2NjJiMjdfMjFkNWEzNDc1NGUwOWM4MDZlODUxOTcyZTEzZTExZTMzMTg3OGZiM2NkM2I1NDQ3NTA3NjdjMGQ3NGQ1ODI2MQ%3D%3D.