Software Development
Checkov
Checkov scans infrastructure-as-code files—such as Terraform, CloudFormation, Kubernetes, Helm, Dockerfile, ARM, and Bicep—for security misconfigurations and compliance violations. It integrates into CI/CD pipelines, producing SARIF output and allowing teams to suppress findings with justification or author custom policies in Python or YAML. The tool benefits DevOps and security engineers who need a reliable, automated gate to ensure infrastructure remains compliant before deployment.
- Publisher / source
- TerminalSkills Library
- Upstream record
- TerminalSkills/skills
- Version
- Version 4
- Published
- Publication review
- Approved for publication
- Content fingerprint
e4a391406867788547e4f6b7137b1002521b00ab3eabc416fc60d0bbe99c37cb