Checkov
Static analysis for infrastructure as code
Checkov is an open-source static analysis tool that scans infrastructure-as-code files such as Terraform, Kubernetes, and CloudFormation for misconfigurations. It runs in self-hosted CI for compliance.
Key features
- IaC misconfiguration scanning
- 1000+ built-in policies
- Custom policy support
- Many frameworks
Strengths
- Released under the Apache-2.0 license
- Easy to set up — beginner-friendly
- First-class Docker support for quick deployment
- Mature project with 8.9k GitHub stars
Checkov replaces
Compare Checkov
10 head-to-head comparisons.
Similar developer tools & git apps
Excalidraw
Developer Tools & GitVirtual hand-drawn style whiteboard
Replaces Miro
lazygit
Developer Tools & GitSimple terminal UI for Git commands
Replaces GitKraken, Sourcetree
Hoppscotch
Developer Tools & GitOpen-source API development ecosystem
Replaces Postman, Insomnia
json-server
Developer Tools & GitFull fake REST API from a JSON file in seconds
Replaces Mockoon, Postman Mock
Strapi
Developer Tools & GitLeading open-source headless CMS
Replaces Contentful
NocoDB
Developer Tools & GitOpen-source Airtable alternative
Replaces Airtable