Updates and recent posts about checkov..

Posts
Description

Link

@anjali shared a link, 3 months, 2 weeks ago

Customer Marketing Manager, Last9

Instrumentation: Getting Signals In

See how instrumentation in OpenTelemetry helps track app issues, know the difference between auto and manual methods, and when to use them.

Activity

@devopslinks added a new tool Syft , 3 months, 2 weeks ago.

Activity

@kaptain added a new tool KubeLinter , 3 months, 2 weeks ago.

Activity

@devopslinks added a new tool Grype , 3 months, 2 weeks ago.

Activity

@kaptain added a new tool Hadolint , 3 months, 2 weeks ago.

Activity

@varbear added a new tool Bandit , 3 months, 2 weeks ago.

Activity

@devopslinks added a new tool JFrog Xray , 3 months, 2 weeks ago.

Activity

@devopslinks added a new tool OWASP Dependency-Check , 3 months, 2 weeks ago.

Activity

@varbear added a new tool pre-commit , 3 months, 2 weeks ago.

Activity

@devopslinks added a new tool GitGuardian , 3 months, 2 weeks ago.

Checkov, created by Bridgecrew (now part of Palo Alto Networks), is an open source policy-as-code scanner for infrastructure-as-code frameworks. It analyzes Terraform, Kubernetes manifests, CloudFormation, Serverless, ARM, Docker, and other IaC formats to detect security, compliance, and configuration issues. Checkov uses a large library of built-in policies mapped to standards like CIS, PCI, SOC2, and NIST, and supports custom policies written in Python or YAML. It integrates seamlessly with CI pipelines, Git repos, and developer workflows, helping teams enforce secure-by-default cloud configurations before deployment. Its coverage, speed, and extensibility make it a flagship tool in cloud DevSecOps.