Join us

ContentUpdates and recent posts about checkov..
 Activity
@kaptain added a new tool Hadolint , 1 week, 4 days ago.
 Activity
@varbear added a new tool Bandit , 1 week, 4 days ago.
 Activity
@devopslinks added a new tool JFrog Xray , 1 week, 4 days ago.
 Activity
@devopslinks added a new tool OWASP Dependency-Check , 1 week, 4 days ago.
 Activity
@varbear added a new tool pre-commit , 1 week, 4 days ago.
 Activity
@devopslinks added a new tool GitGuardian , 1 week, 4 days ago.
 Activity
@devopslinks added a new tool detect-secrets , 1 week, 4 days ago.
 Activity
@devopslinks added a new tool Gitleaks , 1 week, 4 days ago.
Course
@eon01 published a course, 1 week, 4 days ago
Founder, FAUN.dev

DevSecOps in Practice

TruffleHog Flask NeuVector detect-secrets pre-commit OWASP Dependency-Check Docker checkov Bandit Hadolint Grype KubeLinter Syft GitLab CI/CD Trivy Kubernetes

A Hands-On Guide to Operationalizing DevSecOps at Scale

DevSecOps in Practice
Story Trigma Inc Team
@tairascott shared a post, 1 week, 4 days ago
AI Expert and Consultant, Trigma

How Do Large Language Models (LLMs) Work? An In-Depth Look

Discover how Large Language Models work through a clear and human centered explanation. Learn about training, reasoning, and real world applications including Agentic AI development and LLM powered solutions from Trigma.

How do Large Language Models (LLMs) Work Banner
Checkov, created by Bridgecrew (now part of Palo Alto Networks), is an open source policy-as-code scanner for infrastructure-as-code frameworks. It analyzes Terraform, Kubernetes manifests, CloudFormation, Serverless, ARM, Docker, and other IaC formats to detect security, compliance, and configuration issues. Checkov uses a large library of built-in policies mapped to standards like CIS, PCI, SOC2, and NIST, and supports custom policies written in Python or YAML. It integrates seamlessly with CI pipelines, Git repos, and developer workflows, helping teams enforce secure-by-default cloud configurations before deployment. Its coverage, speed, and extensibility make it a flagship tool in cloud DevSecOps.