npm

checkov

Scans infrastructure-as-code for cloud security misconfigurations

brewmacoslinux
Try with needOr install directly
Source

About

Prevent cloud misconfigurations during build-time for IaC tools

Commands

checkov

Examples

Scan a Terraform directory for security issues$ checkov -d ./terraform --framework terraform
Scan a single CloudFormation template file$ checkov -f template.yaml --framework cloudformation
Scan Kubernetes manifests and output results as JSON$ checkov -d ./k8s --framework kubernetes -o json