checkov-security-scan

Detect security misconfigurations and compliance violations in Infrastructure as Code.

17|5|Updated Feb 1, 2026

Search Tags:#security #compliance #infrastructure #iac #scanning #checkov

Ready to run

npx skills add https://github.com/alxayo/sec-check --skill checkov-security-scan

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: checkov-security-scan
Source: https://github.com/alxayo/sec-check/tree/main/.github/skills/checkov-security-scan
Command: npx skills add https://github.com/alxayo/sec-check --skill checkov-security-scan

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Identify and remediate Infrastructure as Code (IaC) security misconfigurations and compliance violations before they reach production, reducing risk and speeding remediation.

Core Features & Use Cases

Cross-framework IaC scanning across Terraform, CloudFormation, Kubernetes manifests, Dockerfiles, Helm charts, ARM/Bicep templates, GitHub Actions, GitLab CI, and CI/CD pipelines to detect misconfigurations and conformance gaps.
Comprehensive checks for cloud misconfigurations, exposed secrets, overly permissive IAM policies, unencrypted storage, publicly accessible resources, container security issues, and insecure CI/CD configurations.
CI/CD integration guidance and pre-deployment validation to enforce security gates, with multi-format outputs (CLI, JSON, SARIF) and framework-specific workflows.

Quick Start

Run a full scan of your project to identify misconfigurations across supported IaC frameworks.

Frequently Asked Questions about checkov-security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan Terraform and Kubernetes manifests for security misconfigurations?▼

To scan Terraform and Kubernetes manifests for security misconfigurations, run a full project scan to detect exposed secrets, overly permissive IAM policies, and unencrypted storage across supported IaC frameworks before deployment.

What is Infrastructure as Code security scanning and when do I need it?▼

Infrastructure as Code security scanning identifies compliance violations and cloud misconfigurations in IaC files. You need it to enforce security gates and remediate risks in CI/CD pipelines before resources reach production environments.

Does this IaC security scan support CloudFormation, Helm charts, and ARM templates?▼

Yes, this IaC security scan supports CloudFormation, Helm charts, ARM templates, Dockerfiles, and GitHub Actions. It applies cross-framework scanning to detect conformance gaps and insecure configurations across diverse cloud deployments.

How do I integrate infrastructure security scanning into a CI/CD pipeline?▼

To integrate infrastructure security scanning into a CI/CD pipeline, use the multi-format outputs like SARIF or JSON to validate configurations and enforce pre-deployment security gates within your existing GitLab CI or GitHub Actions workflows.

Do I need to install Checkov to scan Dockerfiles for compliance violations?▼

Yes, you need to install Checkov to scan Dockerfiles for compliance violations. The scanning process requires this dependency to detect container security issues and output results in CLI, JSON, or SARIF formats.