checkov
Static code analysis tool for Infrastructure as Code (IaC). tldr-pages
On several platforms
Several platforms
Static code analysis tool for Infrastructure as Code (IaC). It is also a software composition analysis (SCA) tool for images and open source packages.
Scan a directory containing IaC (Terraform, Cloudformation, ARM, Ansible, Bicep, Dockerfile, etc.)
checkov --directory path/to/directoryIdentifyScan an IaC file, omitting code blocks in the output
checkov --compact --file path/to/fileIdentifyList all checks for all IaC types
checkov --listIdentify