# Checkov

> Static code analysis for infrastructure-as-code Use when this capability is needed.

- Skill: `tomevault-io/checkov` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add tomevault-io/checkov`
- Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/checkov/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: tomevault-io (https://skillmd.com/u/tomevault-io)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/tomevault-io/checkov

---


## Overview

Brief description of what this tool does, its core value proposition, and when a security practitioner should reach for it.

## Prerequisites

- **OS**: Linux (Ubuntu 22.04+ recommended)
- **Runtime**: Python 3.10+
- **Hardware**: No special requirements
- **API Keys**: None required

## Installation

```bash
# Step 1: Clone the upstream repository
git clone https://github.com/example/tool.git
cd tool

# Step 2: Install dependencies
pip install -r requirements.txt

# Step 3: Verify installation
tool --version
```

## Usage

### Basic Usage

```bash
tool scan --target ./my-project
```

### Advanced Usage

```bash
tool scan --target ./my-project --depth full --output report.json
```

## Workflow Examples

### Example 1: CI/CD Integration

```yaml
# .github/workflows/security.yml
jobs:
  scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - run: tool scan --target . --format sarif > results.sarif
```

### Example 2: Local Development Loop

1. Write code changes
2. Run `tool scan --target .`
3. Review findings
4. Fix and re-scan

## Troubleshooting

| Issue | Solution |
|---|---|
| `ModuleNotFoundError` | Run `pip install -r requirements.txt` |
| Slow scan | Use `--depth quick` for faster results |

## References

- [Official Documentation](https://example.com/docs)
- [GitHub Repository](https://github.com/example/tool)
- [Research Paper](https://arxiv.org/abs/example)

---
> Converted and distributed by [TomeVault](https://tomevault.io/claim/zzw4257) — claim your Tome and manage your conversions.
<!-- tomevault:4.0:skill_md:2026-04-14 -->