{"request_id":"req_01M499DFHGVADTFZ1VWZPP20CR","technology":{"canonical_id":"tech_000000000000009YBMQKPCC515","parent_canonical_id":"","parent_id_zoho":"","name":"Checkov","slug":"checkov","requires_context":false,"popularity":null,"description":"Static analysis tool for finding security and compliance misconfigurations in infrastructure-as-code files.","explanation":"Checkov evaluates infrastructure definitions such as Terraform, CloudFormation and Kubernetes manifests against built-in or custom policies. Attribute and graph checks examine individual settings and resource relationships. It can run in developer and CI workflows. Its package and container vulnerability scanning connects to Prisma Cloud and requires that service’s API token and network access.","official_website_url":"https://www.checkov.io/","official_documentation_url":"https://www.checkov.io/1.Welcome/What%20is%20Checkov.html","source_repository_url":"https://github.com/bridgecrewio/checkov","use_cases":[{"statement":"Apply custom Python or YAML checks to resource properties and relationships.","evidence_urls":["https://www.checkov.io/1.Welcome/What%20is%20Checkov.html"]},{"statement":"Review infrastructure-as-code changes for policy violations before deployment.","evidence_urls":["https://www.checkov.io/"]},{"statement":"Scan packages and container images for known vulnerabilities through the Prisma Cloud integration.","evidence_urls":["https://www.checkov.io/7.Scan%20Examples/Sca.html"]}],"strengths":[{"statement":"Build-pipeline and pre-commit integrations bring checks into existing development workflows.","evidence_urls":["https://www.checkov.io/1.Welcome/Quick%20Start.html"]},{"statement":"Custom policy definitions can encode organization-specific infrastructure requirements.","evidence_urls":["https://www.checkov.io/1.Welcome/What%20is%20Checkov.html"]},{"statement":"One CLI handles several IaC formats and supports graph-based checks.","evidence_urls":["https://www.checkov.io/"]}],"limitations":[{"statement":"Alpine installation is not officially tested or supported because of Python/C-extension compatibility constraints.","evidence_urls":["https://www.checkov.io/2.Basics/Installing%20Checkov.html"]},{"statement":"Runtime visibility and drift detection are provided by the separate Prisma Cloud integration rather than the standalone IaC scanner.","evidence_urls":["https://www.checkov.io/1.Welcome/What%20is%20Checkov.html"]},{"statement":"SCA scanning requires a Prisma Cloud API token and internet connectivity.","evidence_urls":["https://www.checkov.io/7.Scan%20Examples/Sca.html"]}],"pricing":{"access_model":"unknown","billing_models":[],"free_trial_availability":"unknown","evidence_urls":[]},"technology_license":{"name":"Apache License 2.0","scope":"Checkov repository source; Prisma Cloud service access is separate.","spdx_id":"Apache-2.0","url":"https://raw.githubusercontent.com/bridgecrewio/checkov/main/LICENSE","evidence_urls":["https://raw.githubusercontent.com/bridgecrewio/checkov/main/LICENSE"]},"organizations":[{"name":"Bridgecrew","role":"maintainer","evidence_urls":["https://github.com/bridgecrewio/checkov"]}],"certifications":null,"deployment_options":[{"type":"self_hosted","scope":"Install the Python CLI in user-controlled development or CI environments.","evidence_urls":["https://www.checkov.io/1.Welcome/Quick%20Start.html","https://www.checkov.io/2.Basics/Installing%20Checkov.html"]}],"lifecycle":"active","revision":1,"updated_at":"2026-10-04T17:19:30.533202Z","reviewed_at":"2026-10-04T17:19:30.533202Z","source_freshness_at":"2026-10-04T14:57:06Z","aliases":null,"category_ids":["cat_11MNQ7PJNS8D3T72QD5C0G1F6Y","cat_145M0N7ZW6M0TXSRVW454A2AJC"],"domain_ids":["dom_1D2B1EQWZC9G38JXH4C7REEMPK"],"classification_kind":"tool","sources":[{"url":"https://github.com/bridgecrewio/checkov","type":"official","title":"Checkov source repository","claim":"Actual source; Checkov by Bridgecrew identity and SCA integration.","retrieved_at":"2026-10-04T14:57:06Z"},{"url":"https://raw.githubusercontent.com/bridgecrewio/checkov/main/LICENSE","type":"official","title":"Checkov LICENSE","claim":"Apache License 2.0 for source code.","retrieved_at":"2026-10-04T14:57:06Z"},{"url":"https://www.checkov.io/","type":"official","title":"Checkov homepage","claim":"Official project and CLI; infrastructure scanning and custom policy interfaces.","retrieved_at":"2026-10-04T14:57:06Z"},{"url":"https://www.checkov.io/1.Welcome/Quick%20Start.html","type":"official","title":"Checkov Quick Start","claim":"Standalone local scan commands and CI/pre-commit integration.","retrieved_at":"2026-10-04T14:57:06Z"},{"url":"https://www.checkov.io/1.Welcome/What%20is%20Checkov.html","type":"official","title":"What is Checkov?","claim":"IaC formats, attribute/graph policies, Prisma Cloud feature boundary.","retrieved_at":"2026-10-04T14:57:06Z"},{"url":"https://www.checkov.io/2.Basics/Installing%20Checkov.html","type":"official","title":"Installing Checkov","claim":"Local Python installation and Alpine support limitation.","retrieved_at":"2026-10-04T14:57:06Z"},{"url":"https://www.checkov.io/7.Scan%20Examples/Sca.html","type":"official","title":"Checkov SCA scanning","claim":"Package/container CVE scanning requires Prisma Cloud API token and internet access.","retrieved_at":"2026-10-04T14:57:06Z"}],"external_ids":[{"system":"beast","value":"358446000127743013"}],"provenance":"Published taxonomy release 2026.10.7"},"release_version":"2026.10.7"}