| layout | default |
|---|---|
| published | true |
| title | Feature Descriptions |
| nav_order | 4 |
With Checkov you can:
- Run a variety of scan types
- Enable Checkov to run as part of your CI/CD workflow
- Create and contribute custom Checkov policies
With Checkov you can scan a repository, branch, folder, or a single file with attribute-based misconfigurations or connection state errors. See CLI Command Reference.
When running Checkov, you can also:
- Review scan results
- Suppress or skip
- Scan credentials and secrets
- Scan Kubernetes clusters
- Scan Terraform plan output and 3rd party modules
In addition to integrating with your code repository, Checkov can also integrate with your automated build pipeline via CI/CD providers. When your build tests run, Checkov will scan your infrastructure as code files for misconfigurations and you can review the output directly in your CI pipeline.