can't use cli tool - certificate error

Describe the bug

• I can use checkov plugin for vscode, after pasting API key into settings.
• However on cmdline, the python cli tool returns an error message as follows:

BC_API_KEY=$MY_BC_API_KEY checkov --list
2021-12-17 08:21:41,862 [MainThread  ] [ERROR]  Failed to get vcs settings for repo None
HTTPSConnectionPool(host='www.bridgecrew.cloud', port=443): Max retries exceeded with url: /api/v1/vcs/settings/scheme (Caused by SSLError(SSLError("bad handshake: Error([('SSL routines', 'tls_process_server_certificate', 'certificate verify failed')])")))
2021-12-17 08:21:41,862 [MainThread  ] [ERROR]  An error occurred setting up the Bridgecrew platform integration. Please check your API token and try again.

and the same error message appears no matter if i generate a new api key, or use the same key as vscode, or run a different commandline options flags that is given by the wizard on the integrations page.

To Reproduce Steps to reproduce the behavior:

1. Go to Integrations, get an API key (https://www.bridgecrew.cloud/integrations/catalog and click API Tokens in top right corner of the page), and put it into the env variable BC_API_KEY=
2. Run cli command checkov --list
3. See error

Expected behavior

Not sure. I am new to this tool. And it’s a very complicated tool

Desktop (please complete the following information):

• OS: Linux
• Checkov Version 2.0.660

Additional context

Well the linting feature of checkov vscode plugin seems to work. Because I can see linting suggestions there in a Dockerfile

When I use this same exact API token in checkov CLI - it does not work. It always gives the same error msg no matter what.

[nimrodkor]

Hello @dreamcat4 !

I do believe it’s not directly related to checkov - do you mind checking out this #1099? It should contain an arg that will help with your ssl verification

[aspdev91]

I ran into the same issue as OP and the only solution was running the “Install Certificates.command” file in the Python application directory. Hope this can help someone running into the same hurdle.

Source: https://stackoverflow.com/a/58525755