Checkov

Checkov

Static analysis for infrastructure as code

Description

A storage bucket left public in Terraform gets noticed only after a data leak. Checkov is a tool that scans infrastructure as code, container images and open source packages at build time to catch cloud misconfigurations and vulnerabilities early.

It supports Terraform, CloudFormation, Kubernetes, Helm and more with thousands of policies and CI integration.

Features



IaC:Terraform, K8s and more.

Images:Container vulns.

Dependencies:Package risks.

CI:Blocks at build.