Marketplace

iac-checkov

Infrastructure as Code (IaC) security scanning using Checkov with 750+ built-in policies for Terraform, CloudFormation, Kubernetes, Dockerfile, and ARM templates. Use when: (1) Scanning IaC files for security misconfigurations and compliance violations, (2) Validating cloud infrastructure against CIS, PCI-DSS, HIPAA, and SOC2 benchmarks, (3) Detecting secrets and hardcoded credentials in IaC, (4) Implementing policy-as-code in CI/CD pipelines, (5) Generating compliance reports with remediation guidance for cloud security posture management.

$ 安裝

git clone https://github.com/AgentSecOps/SecOpsAgentKit /tmp/SecOpsAgentKit && cp -r /tmp/SecOpsAgentKit/skills/devsecops/iac-checkov ~/.claude/skills/SecOpsAgentKit

// tip: Run this command in your terminal to install the skill