bridgecrewio/checkov
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew. observed · 2026-08-28
Health v2 · maintenance only
95/100
- Activity 99
- Release rhythm 87
- Longevity 100
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.
- gap_med: 2
- age_days: 2471
- days_rel: 7
- days_push: 7
- n_releases_24m: 190
Adoption not part of the score
8973 stars · 1399 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded
Checkov is a static code analysis tool for infrastructure as code (Terraform, CloudFormation, Kubernetes, Helm, Dockerfile, and more) that detects misconfigurations before deployment. It also performs software composition analysis (SCA) on container images and open source packages, with a Python/YAML policy-as-code framework for custom checks.
Use cases
- scan terraform files for security misconfigurations
- find vulnerabilities in docker images and open source packages
- enforce compliance policies on kubernetes manifests
- run iac security checks in ci/cd pipeline
- write custom policy-as-code checks for cloud resources
- scan cloudformation and helm charts before deployment
- prevent cloud misconfigurations at build time
When to choose
- you need build-time scanning of IaC across many frameworks (Terraform, CloudFormation, Kubernetes, Helm, Bicep, ARM)
- you want hundreds of built-in compliance and security checks plus custom Python/YAML policies
- you need CI/CD integrations with GitHub Actions, GitLab, Jenkins, or Bitbucket
- you want a single CLI covering both IaC misconfiguration and SCA scanning
When to avoid
- you need runtime cloud posture management or live infrastructure scanning rather than static analysis
- you only use a niche IaC tool not among the supported frameworks
- you need dynamic application security testing or source code vulnerability analysis beyond IaC and dependencies
Facets
cli-tool · maturity stable
security vulnerability-scanning static-site-generator cli infrastructure-as-code developer-tools security infrastructure-as-code cloud-computing developer-tools python cli windows cloud iac-scanning policy-as-code sca terraform kubernetes cloudformation compliance misconfiguration-detection container-images cicd-integration devops containers docker linux macos
4 sources
- readme: https://github.com/bridgecrewio/checkov · fetched 2026-08-28 · 6cd0bac9be13
- homepage: https://www.checkov.io/ · fetched 2026-08-29 · ebbba9d0b04d
- site_page: https://www.checkov.io/1.Welcome/Quick%20Start.html · fetched 2026-08-29 · f54b407aede0
- site_page: https://www.checkov.io/1.Welcome/Feature%20Descriptions.html · fetched 2026-08-29 · 9452e6d79a65
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| bridgecrewio/checkov | main | 95 |
For agents
markdown · JSON · MCP: product_card(name="bridgecrewio/checkov")
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem