SHSelfHostIndex
CH

Checkov

Static analysis for infrastructure as code

Developer Tools & Git ★ 9.1k stars Easy setup Apache-2.0

Checkov is an open-source static analysis tool that scans infrastructure-as-code files such as Terraform, Kubernetes, and CloudFormation for misconfigurations. It runs in self-hosted CI for compliance.

Official siteSource code

Key features

  • IaC misconfiguration scanning
  • 1000+ built-in policies
  • Custom policy support
  • Many frameworks

Strengths

  • Released under the Apache-2.0 license
  • Easy to set up — beginner-friendly
  • First-class Docker support for quick deployment
  • Mature project with 9.1k GitHub stars

Is Checkov secure?

No known vulnerabilities affect Checkov's latest release (3.3.29). OSV.dev lists 2 past advisories for the project; none of them applies to this release. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

  • Most recent fixed advisory CVE-2021-3040, published 2021-06-10 (1952 days ago), fixed in 2.0.139

Source: OSV.dev, checked 2026-10-14. How this is measured.

Checkov replaces

Self-hosted Snyk IaC alternatives

Health badge

Maintain Checkov? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 94 · excellent

Markdown
[![SelfHostIndex health score for Checkov](https://selfhostindex.com/badge/checkov.svg)](https://selfhostindex.com/app/checkov/)
HTML
<a href="https://selfhostindex.com/app/checkov/"><img src="https://selfhostindex.com/badge/checkov.svg" alt="SelfHostIndex health score for Checkov"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/checkov.svg
   :alt: SelfHostIndex health score for Checkov
   :target: https://selfhostindex.com/app/checkov/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Similar developer tools & git apps