Command-line tool

checkov

brew/checkov

Checked 25 Oct 2026, 21:09 UTC · Listing refreshed from Homebrew, winget, npm, Scoop and cargo; npm packages checked against OSV.dev

Prevent cloud misconfigurations during build-time for IaC tools

Website

At a glance

Type

Command-line tool

Install on

Windows, macOS, Linux

Last checked

25 Oct 2026, 21:09 UTC

Install it

Windows

pipx install checkov

macOS

brew install checkov
pipx install checkov

Linux

brew install checkov
pipx install checkov

Scan a directory containing IaC (Terraform, Cloudformation, ARM, Ansible, Bicep, Dockerfile, etc.)

checkov --directory path/to/directory

Scan an IaC file, omitting code blocks in the output

checkov --compact --file path/to/file

List all checks for all IaC types

checkov --list

Related command-line tools

• datree
  Prevent Kubernetes misconfigurations from reaching production (again 😤 )! From code to cloud, Datree provides an E2E…
• kubevious
  Detects and prevents Kubernetes misconfigurations and violations
• kics
  Detect vulnerabilities, compliance issues, and misconfigurations
• gradle
  Open-source build automation tool based on the Groovy and Kotlin DSL
• yatas
  Tool to audit AWS/GCP infrastructure for misconfiguration or security issues
• trivy
  Vulnerability scanner for container images, file systems, and Git repos docker security cli golang containers…
• depot
  Build your Docker images in the cloud
• mbt
  Multi-Target Application (MTA) build tool for Cloud Applications

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents