# Checkov IaC Scanner

> Scans infrastructure-as-code files for security and compliance misconfigurations using Checkov, with support for Terraform, Kubernetes, and other formats.

- Skill: `agentskillexchange/checkov-iac-scanner` (Agent Skill)
- Install (CLI): `npx skillmds add agentskillexchange/checkov-iac-scanner`
- Raw SKILL.md: https://api.skillmd.com/api/skills/agentskillexchange/checkov-iac-scanner/raw
- Safety review: PASS (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security, DevOps & Infra, Infrastructure as Code, Vulnerability Scanning
- Tags: Checkov, Compliance, Iac, Kubernetes, Security Scanning, Terraform
- Author: agentskillexchange (https://skillmd.com/u/agentskillexchange)
- Updated: 2026-08-22
- Page: https://skillmd.com/skills/agentskillexchange/checkov-iac-scanner

---


# Checkov IaC Scanner



## Prerequisites

Python or Docker

## Installation

Use the upstream install or setup path that matches your environment:
- To install pip follow the official [docs](https://pip.pypa.io/en/stable/cli/pip_install/)
- pip install checkov
- brew install checkov
- brew upgrade checkov

Requirements and caveats from upstream:
- [![Python Version](https://img.shields.io/pypi/pyversions/checkov)](#)
- [![Docker Pulls](https://img.shields.io/docker/pulls/bridgecrew/checkov.svg)](https://hub.docker.com/r/bridgecrew/checkov)
- Supports Python format for attribute policies and YAML format for both attribute and composite policies.

Basic usage or getting-started notes:
- [Getting Started](#getting-started)
- Terraform >= 0.12
- sh

- Source: https://github.com/bridgecrewio/checkov
- Extracted from upstream docs: https://raw.githubusercontent.com/bridgecrewio/checkov/HEAD/README.md

## Documentation

- https://www.checkov.io/2.Basics/CLI%20Command%20Reference.html

## Source

- [Agent Skill Exchange](https://agentskillexchange.com/skills/checkov-iac-scanner/)