diff --git a/radar/2021-01-01/checkov.md b/radar/2021-01-01/checkov.md new file mode 100644 index 0000000..1517e02 --- /dev/null +++ b/radar/2021-01-01/checkov.md @@ -0,0 +1,19 @@ +--- +title: "Checkov" +ring: assess +quadrant: platforms-and-aoe-services + +--- + +Checkov is a static code analysis tool for infrastructure-as-code. + +It scans cloud infrastructure provisioned using + +- Terraform +- Terraform plan +- Cloudformation +- Kubernetes + +and detects security and compliance misconfigurations. + +At AOE we use checkov in CI/CD processes to get insights into our Terraform-Modules.