diff --git a/radar/2021-01-01/checkov.md b/radar/2021-01-01/checkov.md new file mode 100644 index 0000000..c32ab2c --- /dev/null +++ b/radar/2021-01-01/checkov.md @@ -0,0 +1,12 @@ +--- +title: "Checkov" +ring: assess +quadrant: platforms-and-aoe-services + +--- + +Checkov is a static code analysis tool for infrastructure-as-code. + +It scans cloud infrastructure provisioned using Terraform, Terraform plan, Cloudformation, Kubernetes, Dockerfile, Serverless or ARM Templates and detects security and compliance misconfigurations using graph-based scanning. + +At AOE we use checkov in CI/CD processes to get insights into our Terraform-Modules. \ No newline at end of file