← All tools

Checkov

IaC Security · Intermediate

Static analysis for Terraform/K8s/CloudFormation.

Knowledge reference only. Prefer in-browser Labs first. Use this tool only on systems you own or have written authorization to test.

What to learn

  • Policy-as-code
  • CI gates

Legitimate use

Block critical IaC issues before deploy.

Official docs →

Example commands (lab VMs only)

  • checkov -d terraform/
    Scan IaC directory