What is Checkov? | How to install Checkov on Linux Ubuntu to scan Terraform Code for finding security issues?

Checkov is a static code analysis tool designed to scan Infrastructure as Code (IaC) files and identify potential security and compliance misconfigurations. 

Supported IaC types:

Checkov scans following IaC file types:

• Terraform (for AWS, GCP, Azure and OCI)
• CloudFormation (including AWS SAM)
• Azure Resource Manager (ARM)
• Serverless framework
• Helm charts
• Kubernetes
• Docker

Here's a breakdown of Checkov tutorials

Getting Started and Basic Usage:

• Installation: Checkov can be installed using pip, brew, or Docker. For example, using pip:
  pip install checkov

• Basic Scanning: To scan a single file or a directory, use the -f (file) or -d (directory) flags:
  checkov -f main.tf

  checkov -d /path/to/your/iac/code

• Output: Checkov provides a detailed output of passed and failed checks, including the check ID, description, the resource and file location, and a link to more information about the policy
• Specifying Frameworks: You can specify the IaC framework to scan using the --framework flag:

         checkov -d /path/to/kubernetes/manifests --framework kubernetes

• Output Formats: Checkov supports various output formats using the --output flag, such as cli (default), json, junitxml, and sarif. For e.g, for JSON output format, use below command:

          checkov -d . --output json