skills.rest
kfolkes
kfolkesCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

checkov-security-scan

Scan Infrastructure as Code for security misconfigurations and compliance violations using Checkov.

2|Updated Mar 11, 2026
Search Tags:#security#compliance#cloud#iac#devsecops#checkov
One-click install
npx skills add https://github.com/kfolkes/dotnet-modernization-db-transform --skill checkov-security-scan-kfolkes
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: checkov-security-scan
Source: https://github.com/kfolkes/dotnet-modernization-db-transform/tree/main/sec-check/.github/skills/checkov-security-scan
Command: npx skills add https://github.com/kfolkes/dotnet-modernization-db-transform --skill checkov-security-scan-kfolkes

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies security misconfigurations and compliance violations in Infrastructure as Code (IaC) files, helping to prevent security breaches and ensure adherence to best practices.

Core Features & Use Cases

  • IaC Security Scanning: Audits Terraform, CloudFormation, Kubernetes manifests, Dockerfiles, and more for security vulnerabilities.
  • Compliance Checks: Verifies configurations against industry standards like CIS, SOC2, HIPAA, and PCI-DSS.
  • Use Case: Before deploying your cloud infrastructure, use this Skill to automatically scan your Terraform code for common security flaws like publicly exposed S3 buckets or overly permissive IAM policies.

Quick Start

Use the checkov-security-scan skill to scan the current directory for Terraform security issues.

Frequently Asked Questions about checkov-security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Terraform code for security misconfigurations?▼

You can scan Terraform code for security misconfigurations by running an IaC security audit that detects exposed secrets, overly permissive IAM policies, unencrypted storage, and public access risks before deployment. This Skill automates that scanning process for Terraform and other IaC formats.

What IaC formats can I check for compliance violations?▼

You can check Terraform, CloudFormation, Kubernetes manifests, Dockerfiles, Helm charts, ARM/Bicep templates, and GitHub Actions for compliance violations. It validates configurations against industry standards including CIS, SOC2, HIPAA, and PCI-DSS.

Does IaC security scanning support Dockerfiles and Helm charts?▼

Yes, IaC security scanning supports Dockerfiles and Helm charts alongside Terraform, CloudFormation, Kubernetes manifests, ARM/Bicep templates, and GitHub Actions to identify cloud misconfigurations and exposed secrets across your infrastructure definitions.

When do I need to scan Infrastructure as Code before deploying?▼

You need to scan Infrastructure as Code before deploying to prevent security breaches and ensure adherence to best practices. Pre-deployment validation catches publicly exposed S3 buckets, overly permissive IAM policies, and unencrypted storage before they reach production.

Can I use this for DevSecOps compliance checks on Kubernetes manifests?▼

Yes, you can use this for DevSecOps compliance checks on Kubernetes manifests. It audits Kubernetes configurations against CIS, SOC2, HIPAA, and PCI-DSS standards to verify security and compliance before deployment.

What's the best way to automate pre-deployment validation for cloud infrastructure?▼

Automating pre-deployment validation for cloud infrastructure requires scanning IaC files for misconfigurations and compliance violations. This Skill detects cloud misconfigurations, exposed secrets, and public access risks across supported formats to ensure secure deployments.

Related Skills

Explore More Software Engineering Skills→
alxayoalxayo
17

checkov-security-scan

Detect security misconfigurations and compliance violations in Infrastructure as Code.

Community
Advanced
cpfcoachingcpfcoaching

aws-security-audit

Execute AWS CLI commands to scan for security misconfigurations and vulnerabilities.

Community
Advanced
devkenidevkeni
1

iac-security

Scan Infrastructure as Code for security misconfigurations using Checkov, tfsec, and Trivy.

Community
Intermediate
coreymaypraycoreymaypray
1

cloud-security-architect

Audit AWS, Azure, and GCP cloud security posture against CIS benchmarks.

Community
Advanced