Hierarchy

Checkov

Static analysis tool for finding security and compliance misconfigurations in infrastructure-as-code files.

parent_of

Checkovtool

Open a branch to inspect its approved descendants. Use the record link for the canonical technology page.

Selected technology

Checkov

active

Static analysis tool for finding security and compliance misconfigurations in infrastructure-as-code files.

Available reviewed record details appear below. Fields that have not yet been reviewed are omitted.

Canonical ID: tech_000000000000009YBMQKPCC515
Kind: tool
Requires context: No
Parent: None
Domain: Security and identity
Category: Software supply-chain security, Cloud and infrastructure security
Aliases: None
Official website: https://www.checkov.io/
Official documentation: https://www.checkov.io/1.Welcome/What%20is%20Checkov.html
Source repository: https://github.com/bridgecrewio/checkov
Last reviewed: 2026-10-04
Sources checked: 2026-10-04

Last reviewed 2026-10-04 · Release 2026.10.7 · Methodology

Technology popularity in job advertisements

Weekly job advertisements mentioning this technology in Finland, Sweden, Germany, and the United Kingdom. The graph runs from January 1, 2026 through today, or starts later when Queast data begins later.

Loading job-ad history…

Every available weekly observation is included. Popularity here means observed job-ad mentions, not general adoption or market share.

Data provided by best authority for IT sales signals: Queast

Record details and sources

Overview

Checkov evaluates infrastructure definitions such as Terraform, CloudFormation and Kubernetes manifests against built-in or custom policies. Attribute and graph checks examine individual settings and resource relationships. It can run in developer and CI workflows. Its package and container vulnerability scanning connects to Prisma Cloud and requires that service’s API token and network access.

Pricing and access indicators

Qualitative indicators only; exact prices are not tracked.

Access indicator: Unknown
Billing indicators: None specified
Free trial: unknown
Verified on: Not verified

Technology licensing

Apache License 2.0 · Apache-2.0 · license text

Scope: Checkov repository source; Prisma Cloud service access is separate.

This is separate from the taxonomy dataset license (CC-BY-SA-4.0) and from pricing/access.

Organizations

Bridgecrew · maintainersource 1

Deployment options

self hosted · Install the Python CLI in user-controlled development or CI environments.source 1 · source 2

Typical use cases

Apply custom Python or YAML checks to resource properties and relationships.source 1
Review infrastructure-as-code changes for policy violations before deployment.source 1
Scan packages and container images for known vulnerabilities through the Prisma Cloud integration.source 1

Strengths

Build-pipeline and pre-commit integrations bring checks into existing development workflows.source 1
Custom policy definitions can encode organization-specific infrastructure requirements.source 1
One CLI handles several IaC formats and supports graph-based checks.source 1

Limitations

Alpine installation is not officially tested or supported because of Python/C-extension compatibility constraints.source 1
Runtime visibility and drift detection are provided by the separate Prisma Cloud integration rather than the standalone IaC scanner.source 1
SCA scanning requires a Prisma Cloud API token and internet connectivity.source 1

Maintained source links

Checkov source repository
Actual source; Checkov by Bridgecrew identity and SCA integration.
official · retrieved 2026-10-04T14:57:06Z
Checkov LICENSE
Apache License 2.0 for source code.
official · retrieved 2026-10-04T14:57:06Z
Checkov homepage
Official project and CLI; infrastructure scanning and custom policy interfaces.
official · retrieved 2026-10-04T14:57:06Z
Checkov Quick Start
Standalone local scan commands and CI/pre-commit integration.
official · retrieved 2026-10-04T14:57:06Z
What is Checkov?
IaC formats, attribute/graph policies, Prisma Cloud feature boundary.
official · retrieved 2026-10-04T14:57:06Z
Installing Checkov
Local Python installation and Alpine support limitation.
official · retrieved 2026-10-04T14:57:06Z
Checkov SCA scanning
Package/container CVE scanning requires Prisma Cloud API token and internet access.
official · retrieved 2026-10-04T14:57:06Z

How the catalog is maintained

The API uses the active release. For a reproducible reference, pin the dataset download, version, schema and checksum.