Checkov

Open source

Open source scanner for misconfigurations in infrastructure-as-code templates.

by Palo Alto NetworksOfficial site ↗Source code ↗

License: open-source
Open source: Yes

Editorial review

Checkov has not yet been editorially reviewed. User reviews and published field data below are unaffected — we say so rather than implying an editorial verdict.

Facts & attributes

Every value carries its evidence state. “—” means unknown — never a silent default (P-02).

Identity · Taxonomy

Tags(open-source;cloud-native): policy as code, infrastructure as code, cloud security, static analysis, SCA, complianceVerification pending

Platform · Deployment

Delivery model(SaaS;self-hosted;desktop;mobile;embedded;managed-cloud;appliance): self-hostedVerification pending

Pricing · Licensing

License model(proprietary;open-source;source-available;dual-license): open-sourceVerification pending
Source repository(HTTPS URL): https://github.com/bridgecrewio/checkovVerified
SPDX license IDs(Apache-2.0;MIT): Apache-2.0Verified

Features · Product · Fit

Core capabilities(authoring;automation;analytics): scans cloud infrastructure configurations to find misconfigurations before they're deployed, static code analysis for infrastructure as code, software composition analysis (SCA) for container images and open source packages, graph-based scanning of relationships between cloud resources, attribute-based Python and graph-based YAML policy frameworks, CI/CD and version control integrationsVerification pending

Api · Integrations · Ecosystem

CLI(true/false): trueVerification pending

Audience · Use · Case

Best for(Neutral editorial summary): Developers and platform teams scanning Terraform, Kubernetes, and other IaC for misconfigurations before deploymentVerification pending
Primary use cases(build;monitor;automate): build-time misconfiguration detection in Terraform, CloudFormation, Kubernetes, Helm, ARM Templates, and more, scanning container images and open source packages for CVEs, custom policy definition and suppression managementVerification pending
Skill level(beginner;intermediate;advanced;specialist): intermediateVerification pending

Lifecycle · Versioning

Changelog/release notes(HTTPS URL): https://github.com/bridgecrewio/checkov/blob/main/CHANGELOG.mdVerified
Maintenance status(active;maintenance;deprecated;EOL;archived): activeVerification pending

Vendor · Maintainer

Vendor type(commercial;foundation;community;government;consortium;individual): commercialVerification pending

User reviews

Review policy

No published reviews yet.