SaaSHub helps you find the best software and product alternatives Learn more →
Checkov Alternatives
Similar projects and alternatives to checkov
-
terraform
Terraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
-
-
trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
-
-
-
infracost
Cloud cost intelligence for engineers, AI coding agents, and CI/CD 💰📉 Shift FinOps Left!
-
terragrunt
Terragrunt is a flexible orchestration tool that allows Infrastructure as Code written in OpenTofu/Terraform to scale.
-
-
terratest
Terratest is a Go library that makes it easier to write automated tests for your infrastructure code.
-
-
-
-
-
-
kube-bench
Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
-
terrascan
Discontinued Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.
-
kics
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
-
-
cli
a lightweight, security focused, BDD test framework against terraform. (by terraform-compliance)
NOTE:
The number of mentions on this list indicates mentions on common posts plus user suggested alternatives.
Hence, a higher number means a better checkov alternative or higher similarity.
checkov discussion
checkov reviews and mentions
Posts with mentions or reviews of checkov.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2026-07-17.
-
Building a Monorepository of Terraform Modules on GitLab
# See https://pre-commit.com for more information # See https://pre-commit.com/hooks.html for more hooks repos: - repo: https://github.com/pre-commit/pre-commit-hooks rev: v5.0.0 hooks: - id: end-of-file-fixer - id: check-merge-conflict - id: trailing-whitespace args: [--markdown-linebreak-ext=md] - id: check-shebang-scripts-are-executable # YAML - id: check-yaml # Cross platform - id: check-case-conflict # checks for files that would conflict in case-insensitive filesystems. - id: mixed-line-ending # replaces or checks mixed line ending. args: [--fix=lf] - repo: https://github.com/antonbabenko/pre-commit-terraform # Ensure the PRE_COMMIT_TERRAFORM_VERSION value is the same in .gitlab-ci.yml rev: v1.105.0 # Get the latest from: https://github.com/antonbabenko/pre-commit-terraform/releases hooks: - id: terraform_fmt - id: terraform_docs args: ["--args=--lockfile=false"] - id: terraform_tflint - id: terraform_checkov args: - --args=--framework=terraform - --args=--soft-fail - --args=--config-file=__GIT_WORKING_DIR__/.checkov.yaml - --args=--skip-path=__GIT_WORKING_DIR__/.cache/pre-commit - repo: https://github.com/bridgecrewio/checkov.git rev: 3.2.524 hooks: - id: checkov_secrets args: [--directory, ., --framework, secrets, --config-file, .checkov.yaml, --skip-path, .cache/pre-commit] pass_filenames: false - repo: https://github.com/hashicorp/copywrite rev: v0.25.3 hooks: - id: add-headers
-
Catching Cloud Misconfigurations Before They Ship: SAST for Terraform with Checkov
Official repository: https://github.com/bridgecrewio/checkov
-
Applying SAST to Infrastructure as Code: Scanning Terraform with Checkov
Checkov (by Prisma Cloud) is open source, ships 1,000+ built-in policies for AWS, Azure and GCP, and supports Terraform, OpenTofu, CloudFormation, Kubernetes, Dockerfiles and more. It installs with a single pip install, needs no configuration to start, and exports SARIF reports that plug directly into GitHub Code Scanning. It also does something many scanners don't: graph-based checks (IDs starting with CKV2_) that reason about relationships between resources — for example, "this bucket has no aws_s3_bucket_public_access_block resource attached to it".
-
Your Infrastructure Has Bugs Too: Scanning Terraform with Checkov (IaC SAST)
TL;DR: Application code isn't the only thing that ships vulnerabilities — your Terraform does too. I wrote an intentionally insecure AWS configuration, scanned it with Checkov (a SAST tool for Infrastructure as Code, listed on the OWASP Source Code Analysis Tools page), went from 35 failed checks to 0, and wired the scan into GitHub Actions. Full code: GitHub repo →
-
Best DevSecOps Security Tools for CI/CD Pipeline Protection
Representative tools: Checkov is the broadest — it covers Terraform, Ansible, Kubernetes, and more out of the box. tfsec is Terraform-focused and fast (now converging with Trivy). KICS covers a wide spread of IaC formats.
- [PT-BR] Guia de Módulo OpenTofu AWS EC2: Requisitos, Testes e Estratégia BDD
- Checkov Scan para Terraform com Azure Pipelines
-
5 Best Ansible Playbook Scanning Tools in 2026 for Secure and Scalable Automation
GitHub: bridgecrewio/checkov
-
Specs = Tests: Why Spec-Driven Terraform Starts With Tests, Not Documents
Policy-as-code as the spec layer. Tools like OPA (Open Policy Agent), Checkov, and HashiCorp Sentinel let you write rules that are both human-readable and machine-enforceable. A Rego policy that says deny[msg] { not input.resource.aws_s3_bucket.encryption } is simultaneously your spec and your test. That's the Specs = Tests convergence in practice. Static analysis tools like tflint and Trivy add another enforcement layer — catching misconfigurations and security issues before anything gets planned or applied.
- IaC Security in 2026: Terraform, Checkov, and Cloud Drift Detection
-
A note from our sponsor - SaaSHub
www.saashub.com | 17 Jul 2026
Stats
Basic checkov repo stats
77
8,870
9.4
5 days ago
bridgecrewio/checkov is an open source project licensed under Apache License 2.0 which is an OSI approved license.
The primary programming language of checkov is Python.
Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com
Review ★★★★★ 10/10