Checkov
A static code analysis tool that scans infrastructure as code, container images, and open source packages for security misconfigurations and vulnerabilities.
What is Checkov?
Checkov is an open-source static analysis tool that scans Infrastructure as Code (IaC) templates, container images, and open-source packages for security misconfigurations and vulnerabilities. It helps prevent cloud security issues by identifying problems during build-time before resources are provisioned, supporting frameworks like Terraform, Kubernetes, and CloudFormation.
Cloud engineers, DevOps teams, platform engineers, and security professionals who write or manage infrastructure as code and need to enforce security and compliance policies in their CI/CD pipelines.
Developers choose Checkov for its extensive built-in policy coverage, support for a wide range of IaC frameworks, and its ability to provide fast, actionable security feedback directly in their development workflow, helping to shift security left.
Overview
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Use Cases
Best For
- Scanning Terraform or CloudFormation templates for AWS security misconfigurations
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
