Checkov, created by Bridgecrew (now part of Palo Alto Networks), is an open source policy-as-code scanner for infrastructure-as-code frameworks. It analyzes Terraform, Kubernetes manifests, CloudFormation, Serverless, ARM, Docker, and other IaC formats to detect security, compliance, and configuration issues. Checkov uses a large library of built-in policies mapped to standards like CIS, PCI, SOC2, and NIST, and supports custom policies written in Python or YAML. It integrates seamlessly with CI pipelines, Git repos, and developer workflows, helping teams enforce secure-by-default cloud configurations before deployment. Its coverage, speed, and extensibility make it a flagship tool in cloud DevSecOps.
Hey there! 👋 I created FAUN.dev(), an effortless, straightforward way for busy developers to keep up with the technologies they love 🚀
Aymen @eon01
Founder of FAUN.dev()
Join thousands of developers and engineering teams who use FAUN.dev() to stay up-to-date with the technologies they love, without the overwhelm.