From 3c961257283a002c819023fded7cd69c73fbc411 Mon Sep 17 00:00:00 2001 From: Jan Bechtel Date: Mon, 28 Jun 2021 11:25:27 +0200 Subject: [PATCH] Add checkov Signed-off-by: Jan Bechtel --- radar/2021-01-01/checkov.md | 12 ++++++++++++ 1 file changed, 12 insertions(+) create mode 100644 radar/2021-01-01/checkov.md diff --git a/radar/2021-01-01/checkov.md b/radar/2021-01-01/checkov.md new file mode 100644 index 0000000..c32ab2c --- /dev/null +++ b/radar/2021-01-01/checkov.md @@ -0,0 +1,12 @@ +--- +title: "Checkov" +ring: assess +quadrant: platforms-and-aoe-services + +--- + +Checkov is a static code analysis tool for infrastructure-as-code. + +It scans cloud infrastructure provisioned using Terraform, Terraform plan, Cloudformation, Kubernetes, Dockerfile, Serverless or ARM Templates and detects security and compliance misconfigurations using graph-based scanning. + +At AOE we use checkov in CI/CD processes to get insights into our Terraform-Modules. \ No newline at end of file