Checkov

Checkov scans cloud infrastructure configurations to find misconfigurations before they are deployed. A common command-line interface analyses infrastructure as code for Terraform, Terraform plan, CloudFormation, Kubernetes, Helm, ARM templates, the Serverless framework and AWS CDK.

It verifies hundreds of resource types across the major cloud providers. Policies check resource attributes at build time and are written with a simple Python policy-as-code framework; Checkov can also find vulnerabilities in container images and open source packages during the build.

Checkov is written in Python, distributed under the Apache License 2.0 and actively developed on GitHub.