Checkov is a static code analysis tool for infrastructure as code and also a software composition analysis tool for images and open-source packages.
It scans cloud infrastructure provisioned using Terraform, Kubernetes, Helm charts, Kustomize, and more.
More: https://github.com/bridgecrewio/checkov
Post #573
425