checkov for IaC Security

checkov scans IaC for security issues.

Usage

checkov -d . scans for hundreds of security checks.

Multi-tool: TF, K8s, ARM, Cloud Formation.

CI

Run as PR gate.

Suppress false positives explicitly with comments.

Complement

checkov + tfsec for breadth.

Each has unique checks.