skills.rest
alxayo
alxayoCOMMUNITY
Explore all skills by this author →
GitHub

checkov-security-scan

Detect security misconfigurations and compliance violations in Infrastructure as Code.

17|5|Updated Feb 1, 2026
Search Tags:#security#compliance#infrastructure#iac#scanning#checkov
One-click install
npx skills add https://github.com/alxayo/sec-check --skill checkov-security-scan
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: checkov-security-scan
Source: https://github.com/alxayo/sec-check/tree/main/.github/skills/checkov-security-scan
Command: npx skills add https://github.com/alxayo/sec-check --skill checkov-security-scan

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Identify and remediate Infrastructure as Code (IaC) security misconfigurations and compliance violations before they reach production, reducing risk and speeding remediation.

Core Features & Use Cases

  • Cross-framework IaC scanning across Terraform, CloudFormation, Kubernetes manifests, Dockerfiles, Helm charts, ARM/Bicep templates, GitHub Actions, GitLab CI, and CI/CD pipelines to detect misconfigurations and conformance gaps.
  • Comprehensive checks for cloud misconfigurations, exposed secrets, overly permissive IAM policies, unencrypted storage, publicly accessible resources, container security issues, and insecure CI/CD configurations.
  • CI/CD integration guidance and pre-deployment validation to enforce security gates, with multi-format outputs (CLI, JSON, SARIF) and framework-specific workflows.

Quick Start

Run a full scan of your project to identify misconfigurations across supported IaC frameworks.

Frequently Asked Questions about checkov-security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Terraform and Kubernetes manifests for security misconfigurations?▼

To scan Terraform and Kubernetes manifests for security misconfigurations, run a full project scan to detect exposed secrets, overly permissive IAM policies, and unencrypted storage across supported IaC frameworks before deployment.

What is Infrastructure as Code security scanning and when do I need it?▼

Infrastructure as Code security scanning identifies compliance violations and cloud misconfigurations in IaC files. You need it to enforce security gates and remediate risks in CI/CD pipelines before resources reach production environments.

Does this IaC security scan support CloudFormation, Helm charts, and ARM templates?▼

Yes, this IaC security scan supports CloudFormation, Helm charts, ARM templates, Dockerfiles, and GitHub Actions. It applies cross-framework scanning to detect conformance gaps and insecure configurations across diverse cloud deployments.

How do I integrate infrastructure security scanning into a CI/CD pipeline?▼

To integrate infrastructure security scanning into a CI/CD pipeline, use the multi-format outputs like SARIF or JSON to validate configurations and enforce pre-deployment security gates within your existing GitLab CI or GitHub Actions workflows.

Do I need to install Checkov to scan Dockerfiles for compliance violations?▼

Yes, you need to install Checkov to scan Dockerfiles for compliance violations. The scanning process requires this dependency to detect container security issues and output results in CLI, JSON, or SARIF formats.

Related Skills

Explore More Software Engineering Skills→
romankovsvromankovsv

security-infra

Detect misconfigurations, secrets exposure, and policy violations in Terraform and Kubernetes deployments.

Community
Intermediate
SuperlendSuperlend

sarif-parsing

Parse SARIF 2.1.0 files and extract structured findings for reporting.

Official
Intermediate
nickromneynickromney

Setup Security Scanning

Configure security scanning for codebases and CI/CD pipelines.

Community
Advanced
masermediagroup-stackmasermediagroup-stack
1

resource-tagging

Audit and enforce cloud resource tagging across AWS, Azure, and GCP.

Community
Advanced