{"adoption": {"forks": 1399, "observed_at": "2026-08-28T04:10:26.561923+00:00", "stars": 8973}, "canonical_url": "https://ross.abutalabs.com/products/checkov", "card": {"archived": false, "artifact_type": "cli-tool", "description": "Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.", "domain": ["security", "infrastructure-as-code", "cloud-computing", "developer-tools"], "enriched": true, "function": ["security", "vulnerability-scanning", "static-site-generator", "cli", "infrastructure-as-code", "developer-tools"], "health_score": 100, "homepage": "https://www.checkov.io/", "language": "Python", "license": "Apache-2.0", "license_family": "permissive", "maturity": "stable", "member_repos": ["bridgecrewio/checkov"], "name": "bridgecrewio/checkov", "platform": ["python", "cli", "windows", "cloud"], "pushed_at": "2026-08-26T10:49:46+00:00", "repo": "bridgecrewio/checkov", "stars": 8973, "tags": ["iac-scanning", "policy-as-code", "sca", "terraform", "kubernetes", "cloudformation", "compliance", "misconfiguration-detection", "container-images", "cicd-integration", "devops", "containers", "docker", "linux", "macos"], "topics": ["terraform", "static-analysis", "aws", "gcp", "azure", "aws-security", "cloudformation", "scans", "compliance", "kubernetes", "infrastructure-as-code", "devops", "hacktoberfest"], "urls": [], "use_cases": ["scan terraform files for security misconfigurations", "find vulnerabilities in docker images and open source packages", "enforce compliance policies on kubernetes manifests", "run iac security checks in ci/cd pipeline", "write custom policy-as-code checks for cloud resources", "scan cloudformation and helm charts before deployment", "prevent cloud misconfigurations at build time"], "what_it_is": "Checkov is a static code analysis tool for infrastructure as code (Terraform, CloudFormation, Kubernetes, Helm, Dockerfile, and more) that detects misconfigurations before deployment. It also performs software composition analysis (SCA) on container images and open source packages, with a Python/YAML policy-as-code framework for custom checks.", "when_to_avoid": ["you need runtime cloud posture management or live infrastructure scanning rather than static analysis", "you only use a niche IaC tool not among the supported frameworks", "you need dynamic application security testing or source code vulnerability analysis beyond IaC and dependencies"], "when_to_choose": ["you need build-time scanning of IaC across many frameworks (Terraform, CloudFormation, Kubernetes, Helm, Bicep, ARM)", "you want hundreds of built-in compliance and security checks plus custom Python/YAML policies", "you need CI/CD integrations with GitHub Actions, GitLab, Jenkins, or Bitbucket", "you want a single CLI covering both IaC misconfiguration and SCA scanning"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/checkov", "repo": "bridgecrewio/checkov", "role": "main", "score": 95}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:10:26.561923+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-29T17:24:25.858178+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "6cd0bac9be130480dbb4cb7c81d14f11ddbcdcdbc304f76f09eb7d7650b286a7", "fetched_at": "2026-08-28T04:10:26.561923+00:00", "kind": "readme", "missing": false, "url": "https://github.com/bridgecrewio/checkov"}, {"content_hash": "ebbba9d0b04d6a9f129b87a837f4a1bb5bf6370d592db2cfda2ebeab24324a25", "fetched_at": "2026-08-29T08:24:34.186615+00:00", "kind": "homepage", "missing": false, "url": "https://www.checkov.io/"}, {"content_hash": "f54b407aede0b89f091a4892ccdc14c238f0d82e5f18686beaf9fa9eb36959df", "fetched_at": "2026-08-29T08:24:34.195498+00:00", "kind": "site_page", "missing": false, "url": "https://www.checkov.io/1.Welcome/Quick%20Start.html"}, {"content_hash": "9452e6d79a65a0debd1c4d04b3a4c110fcd72dcae41e0e390ea83458b8ff7c47", "fetched_at": "2026-08-29T08:24:34.197496+00:00", "kind": "site_page", "missing": false, "url": "https://www.checkov.io/1.Welcome/Feature%20Descriptions.html"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:10:26.561923+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-29T17:24:25.858178+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "6cd0bac9be130480dbb4cb7c81d14f11ddbcdcdbc304f76f09eb7d7650b286a7", "fetched_at": "2026-08-28T04:10:26.561923+00:00", "kind": "readme", "missing": false, "url": "https://github.com/bridgecrewio/checkov"}, {"content_hash": "ebbba9d0b04d6a9f129b87a837f4a1bb5bf6370d592db2cfda2ebeab24324a25", "fetched_at": "2026-08-29T08:24:34.186615+00:00", "kind": "homepage", "missing": false, "url": "https://www.checkov.io/"}, {"content_hash": "f54b407aede0b89f091a4892ccdc14c238f0d82e5f18686beaf9fa9eb36959df", "fetched_at": "2026-08-29T08:24:34.195498+00:00", "kind": "site_page", "missing": false, "url": "https://www.checkov.io/1.Welcome/Quick%20Start.html"}, {"content_hash": "9452e6d79a65a0debd1c4d04b3a4c110fcd72dcae41e0e390ea83458b8ff7c47", "fetched_at": "2026-08-29T08:24:34.197496+00:00", "kind": "site_page", "missing": false, "url": "https://www.checkov.io/1.Welcome/Feature%20Descriptions.html"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-29T17:24:25.858178+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "6cd0bac9be130480dbb4cb7c81d14f11ddbcdcdbc304f76f09eb7d7650b286a7", "fetched_at": "2026-08-28T04:10:26.561923+00:00", "kind": "readme", "missing": false, "url": "https://github.com/bridgecrewio/checkov"}, {"content_hash": "ebbba9d0b04d6a9f129b87a837f4a1bb5bf6370d592db2cfda2ebeab24324a25", "fetched_at": "2026-08-29T08:24:34.186615+00:00", "kind": "homepage", "missing": false, "url": "https://www.checkov.io/"}, {"content_hash": "f54b407aede0b89f091a4892ccdc14c238f0d82e5f18686beaf9fa9eb36959df", "fetched_at": "2026-08-29T08:24:34.195498+00:00", "kind": "site_page", "missing": false, "url": "https://www.checkov.io/1.Welcome/Quick%20Start.html"}, {"content_hash": "9452e6d79a65a0debd1c4d04b3a4c110fcd72dcae41e0e390ea83458b8ff7c47", "fetched_at": "2026-08-29T08:24:34.197496+00:00", "kind": "site_page", "missing": false, "url": "https://www.checkov.io/1.Welcome/Feature%20Descriptions.html"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:10:26.561923+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:10:26.561923+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:10:26.561923+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-29T17:24:25.858178+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "6cd0bac9be130480dbb4cb7c81d14f11ddbcdcdbc304f76f09eb7d7650b286a7", "fetched_at": "2026-08-28T04:10:26.561923+00:00", "kind": "readme", "missing": false, "url": "https://github.com/bridgecrewio/checkov"}, {"content_hash": "ebbba9d0b04d6a9f129b87a837f4a1bb5bf6370d592db2cfda2ebeab24324a25", "fetched_at": "2026-08-29T08:24:34.186615+00:00", "kind": "homepage", "missing": false, "url": "https://www.checkov.io/"}, {"content_hash": "f54b407aede0b89f091a4892ccdc14c238f0d82e5f18686beaf9fa9eb36959df", "fetched_at": "2026-08-29T08:24:34.195498+00:00", "kind": "site_page", "missing": false, "url": "https://www.checkov.io/1.Welcome/Quick%20Start.html"}, {"content_hash": "9452e6d79a65a0debd1c4d04b3a4c110fcd72dcae41e0e390ea83458b8ff7c47", "fetched_at": "2026-08-29T08:24:34.197496+00:00", "kind": "site_page", "missing": false, "url": "https://www.checkov.io/1.Welcome/Feature%20Descriptions.html"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:10:26.561923+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:10:26.561923+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-29T17:24:25.858178+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "6cd0bac9be130480dbb4cb7c81d14f11ddbcdcdbc304f76f09eb7d7650b286a7", "fetched_at": "2026-08-28T04:10:26.561923+00:00", "kind": "readme", "missing": false, "url": "https://github.com/bridgecrewio/checkov"}, {"content_hash": "ebbba9d0b04d6a9f129b87a837f4a1bb5bf6370d592db2cfda2ebeab24324a25", "fetched_at": "2026-08-29T08:24:34.186615+00:00", "kind": "homepage", "missing": false, "url": "https://www.checkov.io/"}, {"content_hash": "f54b407aede0b89f091a4892ccdc14c238f0d82e5f18686beaf9fa9eb36959df", "fetched_at": "2026-08-29T08:24:34.195498+00:00", "kind": "site_page", "missing": false, "url": "https://www.checkov.io/1.Welcome/Quick%20Start.html"}, {"content_hash": "9452e6d79a65a0debd1c4d04b3a4c110fcd72dcae41e0e390ea83458b8ff7c47", "fetched_at": "2026-08-29T08:24:34.197496+00:00", "kind": "site_page", "missing": false, "url": "https://www.checkov.io/1.Welcome/Feature%20Descriptions.html"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:10:26.561923+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:10:26.561923+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:10:26.561923+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-29T17:24:25.858178+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "6cd0bac9be130480dbb4cb7c81d14f11ddbcdcdbc304f76f09eb7d7650b286a7", "fetched_at": "2026-08-28T04:10:26.561923+00:00", "kind": "readme", "missing": false, "url": "https://github.com/bridgecrewio/checkov"}, {"content_hash": "ebbba9d0b04d6a9f129b87a837f4a1bb5bf6370d592db2cfda2ebeab24324a25", "fetched_at": "2026-08-29T08:24:34.186615+00:00", "kind": "homepage", "missing": false, "url": "https://www.checkov.io/"}, {"content_hash": "f54b407aede0b89f091a4892ccdc14c238f0d82e5f18686beaf9fa9eb36959df", "fetched_at": "2026-08-29T08:24:34.195498+00:00", "kind": "site_page", "missing": false, "url": "https://www.checkov.io/1.Welcome/Quick%20Start.html"}, {"content_hash": "9452e6d79a65a0debd1c4d04b3a4c110fcd72dcae41e0e390ea83458b8ff7c47", "fetched_at": "2026-08-29T08:24:34.197496+00:00", "kind": "site_page", "missing": false, "url": "https://www.checkov.io/1.Welcome/Feature%20Descriptions.html"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:10:26.561923+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:10:26.561923+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-29T17:24:25.858178+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "6cd0bac9be130480dbb4cb7c81d14f11ddbcdcdbc304f76f09eb7d7650b286a7", "fetched_at": "2026-08-28T04:10:26.561923+00:00", "kind": "readme", "missing": false, "url": "https://github.com/bridgecrewio/checkov"}, {"content_hash": "ebbba9d0b04d6a9f129b87a837f4a1bb5bf6370d592db2cfda2ebeab24324a25", "fetched_at": "2026-08-29T08:24:34.186615+00:00", "kind": "homepage", "missing": false, "url": "https://www.checkov.io/"}, {"content_hash": "f54b407aede0b89f091a4892ccdc14c238f0d82e5f18686beaf9fa9eb36959df", "fetched_at": "2026-08-29T08:24:34.195498+00:00", "kind": "site_page", "missing": false, "url": "https://www.checkov.io/1.Welcome/Quick%20Start.html"}, {"content_hash": "9452e6d79a65a0debd1c4d04b3a4c110fcd72dcae41e0e390ea83458b8ff7c47", "fetched_at": "2026-08-29T08:24:34.197496+00:00", "kind": "site_page", "missing": false, "url": "https://www.checkov.io/1.Welcome/Feature%20Descriptions.html"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-29T17:24:25.858178+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "6cd0bac9be130480dbb4cb7c81d14f11ddbcdcdbc304f76f09eb7d7650b286a7", "fetched_at": "2026-08-28T04:10:26.561923+00:00", "kind": "readme", "missing": false, "url": "https://github.com/bridgecrewio/checkov"}, {"content_hash": "ebbba9d0b04d6a9f129b87a837f4a1bb5bf6370d592db2cfda2ebeab24324a25", "fetched_at": "2026-08-29T08:24:34.186615+00:00", "kind": "homepage", "missing": false, "url": "https://www.checkov.io/"}, {"content_hash": "f54b407aede0b89f091a4892ccdc14c238f0d82e5f18686beaf9fa9eb36959df", "fetched_at": "2026-08-29T08:24:34.195498+00:00", "kind": "site_page", "missing": false, "url": "https://www.checkov.io/1.Welcome/Quick%20Start.html"}, {"content_hash": "9452e6d79a65a0debd1c4d04b3a4c110fcd72dcae41e0e390ea83458b8ff7c47", "fetched_at": "2026-08-29T08:24:34.197496+00:00", "kind": "site_page", "missing": false, "url": "https://www.checkov.io/1.Welcome/Feature%20Descriptions.html"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-29T17:24:25.858178+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "6cd0bac9be130480dbb4cb7c81d14f11ddbcdcdbc304f76f09eb7d7650b286a7", "fetched_at": "2026-08-28T04:10:26.561923+00:00", "kind": "readme", "missing": false, "url": "https://github.com/bridgecrewio/checkov"}, {"content_hash": "ebbba9d0b04d6a9f129b87a837f4a1bb5bf6370d592db2cfda2ebeab24324a25", "fetched_at": "2026-08-29T08:24:34.186615+00:00", "kind": "homepage", "missing": false, "url": "https://www.checkov.io/"}, {"content_hash": "f54b407aede0b89f091a4892ccdc14c238f0d82e5f18686beaf9fa9eb36959df", "fetched_at": "2026-08-29T08:24:34.195498+00:00", "kind": "site_page", "missing": false, "url": "https://www.checkov.io/1.Welcome/Quick%20Start.html"}, {"content_hash": "9452e6d79a65a0debd1c4d04b3a4c110fcd72dcae41e0e390ea83458b8ff7c47", "fetched_at": "2026-08-29T08:24:34.197496+00:00", "kind": "site_page", "missing": false, "url": "https://www.checkov.io/1.Welcome/Feature%20Descriptions.html"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-29T17:24:25.858178+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "6cd0bac9be130480dbb4cb7c81d14f11ddbcdcdbc304f76f09eb7d7650b286a7", "fetched_at": "2026-08-28T04:10:26.561923+00:00", "kind": "readme", "missing": false, "url": "https://github.com/bridgecrewio/checkov"}, {"content_hash": "ebbba9d0b04d6a9f129b87a837f4a1bb5bf6370d592db2cfda2ebeab24324a25", "fetched_at": "2026-08-29T08:24:34.186615+00:00", "kind": "homepage", "missing": false, "url": "https://www.checkov.io/"}, {"content_hash": "f54b407aede0b89f091a4892ccdc14c238f0d82e5f18686beaf9fa9eb36959df", "fetched_at": "2026-08-29T08:24:34.195498+00:00", "kind": "site_page", "missing": false, "url": "https://www.checkov.io/1.Welcome/Quick%20Start.html"}, {"content_hash": "9452e6d79a65a0debd1c4d04b3a4c110fcd72dcae41e0e390ea83458b8ff7c47", "fetched_at": "2026-08-29T08:24:34.197496+00:00", "kind": "site_page", "missing": false, "url": "https://www.checkov.io/1.Welcome/Feature%20Descriptions.html"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 99, "longevity": 100, "rhythm": 87}, "computed_at": "2026-09-03T02:39:23.370411+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 2471, "days_push": 7, "days_rel": 7, "gap_med": 2, "n_releases_24m": 190}, "score": 95, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}