Checkov

Static code analysis for infrastructure as code

About Checkov

Checkov is a static analysis tool that scans Terraform, Kubernetes, and other infrastructure code for misconfigurations and security issues. It is typically installed on Linux servers or containers and administered through configuration files, a CLI, or a built-in web interface. In practice it rewards a little setup effort with long-term independence, transparent behavior, and a community that documents real-world deployments.

Checkov key facts

Category: Developer Tools
Pricing: Free — listed in this directory as a free tool, with no paid plan required to use it.
Focus areas: iac, analysis, terraform, security
Official site: checkov.io

About the Developer Tools category

Editors, platforms, and services developers rely on to build and ship software. The Developer Tools category on Tools Hub currently lists 738 tools. Alongside Checkov, it includes Terrascan, tfsec, Gitleaks, TruffleHog.

FreeDeveloper Toolsiacanalysisterraformsecurity

More in Developer Tools

Comparing tools in the Developer Tools category? These related listings are worth a look: Terrascan — Detect compliance and security violations in IaC; tfsec — Security scanner for Terraform code; Gitleaks — Scan code and git history for leaked secrets.