Checkov
Vulnerability ScanningStatic code analysis and software composition analysis tool for infrastructure-as-code and container images
Features
- Over 1000 built-in policies covering security/compliance for major clouds
- Scans Terraform, CloudFormation, Kubernetes, Dockerfiles, Serverless frameworks and CI workflow files
- Detects AWS credentials and secrets using regex/entropy detection
Security Response History
2 CVEs| CVE | Severity | Disclosed | Patched (this tool) | vs Ecosystem Median |
|---|---|---|---|---|
| CVE-2020-11023 KEV |
medium
CVSS 6.9
|
2025-01-23 | 2026-01-25 | 1y / median 1y 1mo |
| CVE-2023-44487 KEV |
medium
CVSS 7.5
|
2023-10-10 | 2026-01-25 | 2y 4mo / median 2y 3mo |
Recent releases
View all 25 releases →
3.2.528
Bug fix
Fixed secrets scanner to report all multiline regex matches per file instead of only the first.
Full changelog
Bug Fix
- secrets: report all multiline regex matches per file, not just first occurrence - FIX - #7540
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Install & Platforms
Install via
pip
docker
Platforms
linux
macos
windows
