bridgecrewio/checkov
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Build with Backblaze B2
SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.
Loading star history...
Where it stands
Rank, growth pace and release cadence relative to everything GStars tracks.
5 releases in the last 90 days, the latest 1 day ago, with 381 contributors on GitHub.
Use Cases & Benefits
- Detects security and compliance misconfigurations in infrastructure as code, container images, and open source packages using static analysis.
- Provides over 1000 built-in policies with graph-based scanning for context-aware detection across multiple cloud platforms and IaC frameworks.
- Use for scanning Terraform, CloudFormation, Kubernetes, and other IaC templates to prevent cloud misconfigurations before deployment.
- Use for performing software composition analysis (SCA) on container images and open source packages to identify vulnerabilities and CVEs.
- Use for integrating security checks into CI/CD pipelines with support for various workflow files like GitHub Actions, Jenkins, and Azure Pipelines.
Should you depend on it?
License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.
License
Apache 2.0
Permissive: commercial use, modification and redistribution are allowed with attribution; includes an explicit patent grant from contributors.
Community files
- README: present
- Contributing guide: present
- Code of conduct: present
Watch-outs
No watch-outs from GStars' checks.
General guidance from repository metadata, not legal advice. How we score
From the README
Checkov is a static code analysis tool for infrastructure as code (IaC) and also a software composition analysis (SCA) tool for images and open source packages.
It scans cloud infrastructure provisioned using Terraform, Terraform plan, Cloudformation, AWS SAM, Kubernetes, Helm charts, Kustomize, Dockerfile, Serverless, Bicep, OpenAPI, ARM Templates, or OpenTofu and detects security and compliance misconfigurations using graph-based scanning.
Daily snapshots
Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots
Forks
1.5K+75
Open issues
212+59
Compared with peers in Cloud
Fastest-growing repositories GStars tracks in this cohort for the week of Nov 8, by 7-day star growth
| Repository | Stars | +7d | Health | Last release |
|---|---|---|---|---|
| Asymptote-Labs/agent-beacon | 3.4K | +315 | 75 | 1 day ago |
| firecracker-microvm/firecracker | 37.9K | — | 62 | 59 days ago |
| vectordotdev/vector | 22.8K | — | 64 | 11 days ago |
| jhipster/generator-jhipster | 22.5K | — | 62 | 51 days ago |
| moby/buildkit | 10.4K | — | 65 | 1 day ago |
| bridgecrewio/checkov | 9.1K | — | 65 | 1 day ago |
| Category median | 22.5K | — | 64 | — |
Discover Repositories
Search across tracked repositories by name or description