checkov

Name: checkov
Availability: InStock
Author: Cloudgeni

Detect security and compliance violations in Terraform with Checkov scans.

47|5|Updated Apr 16, 2026

Search Tags:#static analysis #remediation #compliance #terraform #checkov #iac security #policy scanning

Ready to run

npx skills add https://github.com/Cloudgeni-ai/opengeni --skill checkov-cloudgeni-ai

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: checkov
Source: https://github.com/Cloudgeni-ai/opengeni/tree/main/packages/runtime/src/bundled_hashicorp_terraform_skills/checkov
Command: npx skills add https://github.com/Cloudgeni-ai/opengeni --skill checkov-cloudgeni-ai

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Checkov helps you find security, compliance, and best-practice issues in Terraform and infrastructure-as-code before they reach production, so you can remediate quickly and consistently.

Core Features & Use Cases

Terraform & IaC Policy Scanning: Detects misconfigurations and policy violations in Terraform code and related infrastructure-as-code.
Actionable Findings Summaries: Identifies failed checks with check IDs, affected files/resources, and the underlying reasons for violations.
Safe Remediation Workflow: Supports targeted edits to selected findings, keeps Terraform style intact, and validates changes with formatting, init (no remote backend), and validation.

Quick Start

Run checkov against your Terraform repo mounted under /workspace/repos and summarize the failed checks so you can decide which fixes to apply next.

Frequently Asked Questions about checkov

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan Terraform for security and compliance policy violations?▼

Run Checkov static analysis against your Terraform repository to detect misconfigurations and policy violations, generating compact and JSON outputs that summarize failed checks with IDs, affected files, and reasons.

What is the best way to automate infrastructure-as-code security scanning before production?▼

Infrastructure-as-code security scanning identifies best-practice issues in Terraform code prior to deployment. It runs static analysis checks and provides actionable findings summaries for quick, consistent remediation.

How do I safely remediate Terraform security issues found during a static analysis scan?▼

Apply targeted edits to the selected findings, maintain Terraform style using terraform fmt, validate changes with terraform init -backend=false and terraform validate, then run a follow-up Checkov scan.

Does Checkov work with Terraform modules to detect infrastructure-as-code misconfigurations?▼

Yes, Checkov scans IaC repositories containing Terraform modules and resources. It runs using the terraform framework to detect policy gaps and outputs both compact and JSON formats for review.

Can I validate Terraform changes locally without a remote backend after fixing security findings?▼

Yes, the safe remediation workflow validates changes locally by running terraform init with the -backend=false flag, followed by terraform validate to ensure syntax and configuration correctness.

Why do I need JSON output when running static analysis on Terraform code?▼

JSON output provides an easily parsable format for summarizing failed Checkov checks. It complements compact output by enabling automated processing and clearer review of security and compliance violations.