$ man checkov

Checkov

Finds misconfigurations in Terraform, Kubernetes, Dockerfiles and CI configs.

fix at sourcepassive / local onlyvia awesome-security

## why a developer should care

Public S3 buckets and open security groups are attack surface created in config files. Catch them in the pull request, not in Shodan.

## install

Other platforms and pre-built binaries: official install guide ↗

Check it worked: open a new terminal and run checkov --version. "command not found" means it isn't installed or isn't on your PATH yet.

## shortcuts

## helps with

• A02 Security Misconfiguration

→ official docs · ← all tools