What is Checkov?
Checkov is an open-source static analysis tool for infrastructure-as-code, container images, and open-source packages. It scans Terraform, Kubernetes, CloudFormation, Helm, Dockerfiles, and other formats to detect security and compliance misconfigurations before deployment. DevOps and platform teams use it in CI pipelines to enforce policy-as-code and catch cloud security issues early.
