Files
TechradarDev/radar/2021-01-01/checkov.md
Jan Bechtel 8cca09dcd8 use bullets
2021-06-29 13:34:19 +02:00

20 lines
408 B
Markdown

---
title: "Checkov"
ring: assess
quadrant: platforms-and-aoe-services
---
Checkov is a static code analysis tool for infrastructure-as-code.
It scans cloud infrastructure provisioned using
- Terraform
- Terraform plan
- Cloudformation
- Kubernetes
and detects security and compliance misconfigurations.
At AOE we use checkov in CI/CD processes to get insights into our Terraform-Modules.