Data

Tools

Indexes

Applications

Experiments

Summary

An open API service for producing an overview of a list of open source projects.

https://github.com/bridgecrewio/checkov

aws aws-security azure cloudformation compliance devops gcp hacktoberfest infrastructure-as-code kubernetes scans static-analysis terraform

Score: 32.22383992764624

Last synced: 1 day ago
JSON representation

Repository metadata:

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

Owner metadata:

Committers metadata

Last synced: 2 days ago

Total Commits: 16,415
Total Committers: 439
Avg Commits per committer: 37.392
Development Distribution Score (DDS): 0.85

Commits in past year: 225
Committers in past year: 28
Avg Commits per committer in past year: 8.036
Development Distribution Score (DDS) in past year: 0.724

Name Email Commits
Nimrod Kor n****r@g****m 2458
Anton Grübel a****l@g****m 1892
James Woolfenden j****n@g****m 1106
GitHub Action a****n@g****m 764
mikeurbanski1 m****1 696
barak s****k@g****m 609
Rotem Avni 5****i 564
naorda t****d 472
ArielK 6****u 451
Barak Schoster Goihman b****k@b****o 432
YaaraVerner 8****r 337
Saar Ettinger S****t 328
Taylor 2****1 302
achiar99 3****9 268
ChanochShayner 5****r 248
dependabot[bot] 4****] 246
Nick n****n@o****m 240
LirShindalman 4****n 218
Kartikeya Pande k****9@g****m 182
Peleg Litvak p****k@g****m 181
Barak Fatal 3****6 178
Max Amelchenko m****2@g****m 159
Eliran Turgeman 5****n 143
ipeleg i****g@p****m 136
ajbara a****a@p****m 132
Omry Mendelovich 1****n 117
Eliran Turgeman e****n@p****m 109
Noa Azoulay n****1@g****m 106
itai1357 4****7 104
marynaKK 9****K 99
and 409 more...

Issue and Pull Request metadata

Last synced: 2 days ago

Total issues: 863
Total pull requests: 2,328
Average time to close issues: 5 months
Average time to close pull requests: 22 days
Total issue authors: 639
Total pull request authors: 297
Average comments per issue: 2.54
Average comments per pull request: 0.48
Merged pull request: 1,419
Bot issues: 0
Bot pull requests: 263

Past year issues: 99
Past year pull requests: 198
Past year average time to close issues: 6 months
Past year average time to close pull requests: 2 months
Past year issue authors: 87
Past year pull request authors: 120
Past year average comments per issue: 1.37
Past year average comments per pull request: 0.71
Past year merged pull request: 39
Past year bot issues: 0
Past year bot pull requests: 9

More stats: https://issues.ecosyste.ms/repositories/lookup?url=https://github.com/bridgecrewio/checkov

Top Issue Authors

  • tdefise (30)
  • rlison47 (15)
  • tsmithv11 (13)
  • pingoleon108 (8)
  • gruebel (7)
  • tberreis (7)
  • cbhat-ie (6)
  • GunasheelaSatharasi (6)
  • msl0 (5)
  • bakosa (5)
  • dbbc96 (5)
  • jbrule (5)
  • tarfeef101 (4)
  • pszypowicz (4)
  • ppawlowski (4)

Top Pull Request Authors

  • dependabot[bot] (263)
  • tsmithv11 (228)
  • gruebel (97)
  • RabeaZr (75)
  • JamesWoolfenden (75)
  • bo156 (74)
  • lirshindalman (74)
  • achiar99 (67)
  • omriyoffe-panw (56)
  • omryMen (55)
  • ChanochShayner (52)
  • tehila86127 (51)
  • maxamel (45)
  • SteveVaknin (44)
  • pazbechor (38)

Top Issue Labels

  • checks (404)
  • stale (228)
  • terraform (82)
  • crash (69)
  • outputs (49)
  • skips (43)
  • graph (42)
  • best practices (37)
  • contribution requested (36)
  • languages (36)
  • good first issue (32)
  • integrations (32)
  • More info required (20)
  • noise (13)
  • terraform plan (12)
  • wontfix (9)
  • bicep (8)
  • cloudformation (7)
  • enhancement (7)
  • openapi (7)
  • available in Prisma Cloud (7)
  • docker (6)
  • Parser (5)
  • question (5)
  • docs (4)
  • chore (4)
  • secrets (3)
  • terraform json (3)
  • helm (3)
  • k8s (3)

Top Pull Request Labels

  • dependencies (263)
  • github_actions (221)
  • stale (73)
  • python (26)
  • go (10)
  • title needs adjustment (6)
  • javascript (5)
  • terraform (3)

Package metadata

nixpkgs-unstable: checkov

Static code analysis tool for infrastructure-as-code

pypi.org: checkov

Infrastructure as code static analysis

  • Homepage: https://github.com/bridgecrewio/checkov
  • Documentation: https://checkov.readthedocs.io/
  • Licenses: Apache License 2.0
  • Latest release: 3.4.0 (published 5 days ago)
  • Last Synced: 2026-11-01T09:08:39.611Z (1 day ago)
  • Versions: 3,777
  • Dependent Packages: 12
  • Dependent Repositories: 138
  • Downloads: 3,968,190 Last month
  • Docker Downloads: 20,141,126
  • Rankings:
    • Downloads: 0.091%
    • Stargazers count: 0.367%
    • Docker downloads count: 0.572%
    • Average: 0.864%
    • Forks count: 1.275%
    • Dependent repos count: 1.283%
    • Dependent packages count: 1.595%
  • Maintainers (3)
pypi.org: checkov3

Infrastructure as code static analysis

  • Homepage: https://github.com/bridgecrewio/checkov
  • Documentation: https://checkov3.readthedocs.io/
  • Licenses: Apache License 2.0
  • Latest release: 0.1.13 (published over 3 years ago)
  • Last Synced: 2026-10-31T17:06:14.405Z (2 days ago)
  • Versions: 13
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Downloads: 82 Last month
  • Rankings:
    • Stargazers count: 0.389%
    • Forks count: 1.464%
    • Dependent packages count: 6.955%
    • Average: 9.833%
    • Dependent repos count: 30.522%
  • Maintainers (1)
proxy.golang.org: github.com/bridgecrewio/checkov/checkov/sast_core

pypi.org: testiac

Infrastructure as code static analysis

  • Homepage: https://github.com/bridgecrewio/checkov
  • Documentation: https://testiac.readthedocs.io/
  • Licenses: Apache License 2.0
  • Latest release: 2.3.199 (published over 3 years ago)
  • Last Synced: 2026-10-31T17:05:49.615Z (2 days ago)
  • Versions: 1
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Stargazers count: 0.39%
    • Forks count: 1.288%
    • Dependent packages count: 7.167%
    • Average: 10.516%
    • Dependent repos count: 33.219%
pypi.org: sg-ckv

Infrastructure as code static analysis

  • Homepage: https://github.com/bridgecrewio/checkov
  • Documentation: https://sg-ckv.readthedocs.io/
  • Licenses: Apache License 2.0
  • Latest release: 2.3.199 (published over 3 years ago)
  • Last Synced: 2026-10-31T17:05:53.874Z (2 days ago)
  • Versions: 1
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Stargazers count: 0.39%
    • Forks count: 1.288%
    • Dependent packages count: 7.167%
    • Average: 10.516%
    • Dependent repos count: 33.219%
pypi.org: pingsafecli

Infrastructure as code static analysis

  • Homepage: https://github.com/bridgecrewio/checkov
  • Documentation: https://pingsafecli.readthedocs.io/
  • Licenses: Apache License 2.0
  • Latest release: 2.3.204 (published over 3 years ago)
  • Last Synced: 2026-10-31T17:06:14.403Z (2 days ago)
  • Versions: 6
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Downloads: 275 Last month
  • Rankings:
    • Stargazers count: 0.389%
    • Forks count: 1.287%
    • Dependent packages count: 7.167%
    • Average: 11.144%
    • Downloads: 13.521%
    • Dependent repos count: 33.355%
  • Maintainers (1)
pypi.org: chekov

A fake typosquat malicious library of checkov, used only for testing purposes. The library supposedly steals the user's env vars and sends it to a remote server, the domain is fake though so no data is actually stolen.

  • Homepage: https://github.com/bridgecrewio/checkov
  • Documentation: https://chekov.readthedocs.io/
  • Licenses: Apache License 2.0
  • Latest release: 2.3.273 (published over 3 years ago)
  • Last Synced: 2026-10-31T17:06:34.950Z (2 days ago)
  • Versions: 1
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Downloads: 79 Last month
  • Rankings:
    • Stargazers count: 0.388%
    • Forks count: 1.28%
    • Dependent packages count: 7.27%
    • Average: 12.568%
    • Dependent repos count: 41.335%
  • Maintainers (1)
pypi.org: psgraph

Infrastructure as code static analysis

  • Homepage: https://github.com/bridgecrewio/checkov
  • Documentation: https://psgraph.readthedocs.io/
  • Licenses: Apache License 2.0
  • Latest release: 2.3.199 (published over 3 years ago)
  • Last Synced: 2026-10-31T17:05:53.610Z (2 days ago)
  • Versions: 1
  • Dependent Packages: 1
  • Dependent Repositories: 0
  • Downloads: 2 Last month
  • Rankings:
    • Stargazers count: 0.389%
    • Forks count: 1.287%
    • Dependent packages count: 7.167%
    • Average: 12.767%
    • Downloads: 21.771%
    • Dependent repos count: 33.219%
  • Maintainers (1)
nixpkgs-24.05: checkov

Static code analysis tool for infrastructure-as-code

nixpkgs-23.05: checkov

Static code analysis tool for infrastructure-as-code

nixpkgs-23.11: checkov

Static code analysis tool for infrastructure-as-code

nixpkgs-24.11: checkov

Static code analysis tool for infrastructure-as-code

Dependencies

kubernetes/Dockerfile docker
  • python 3.11-slim build
tests/dockerfile/checks/example_ExposePort22/success/Dockerfile docker
  • busybox latest build
tests/dockerfile/checks/example_ReferenceLatestTag/success_multi_stage_scratch/Dockerfile docker
  • base latest build
  • scratch latest build
tests/dockerfile/graph_builder/checks/resources/RunAptGetForceYes/pass/Dockerfile docker
  • debian bullseye build
tests/dockerfile/graph_builder/checks/resources/RunPipTrustedHost/pass/Dockerfile docker
  • alpine 3.5 build
tests/dockerfile/graph_builder/checks/resources/RunUnsafeWget/pass/Dockerfile docker
  • alpine 3.5 build
tests/dockerfile/graph_builder/checks/resources/RunUsingSudo/pass/Dockerfile docker
  • busybox latest build
.github/workflows/nightly.yml actions
  • actions/checkout 11bd71901bbe5b1630ceea73d27597364c9af683 composite
  • actions/setup-python 39cd14951b08e74b54015e9e001cdefcf80e669f composite
  • actions/upload-release-asset v1 composite
  • mikepenz/release-changelog-builder-action 5f3409748e2230350e149a7f7b5b8e9bcd785d44 composite
  • softprops/action-gh-release da05d552573ad5aba039eaac05058a918a7bf631 composite
  • stefanzweifel/changelog-updater-action a938690fad7edf25368f37e43a1ed1b34303eb36 composite
  • stefanzweifel/git-auto-commit-action b863ae1933cb653a53c021fe36dbb774e1fb9403 composite
tests/dockerfile/checks/example_HealthcheckExists/success/Dockerfile docker
  • base latest build
tests/dockerfile/checks/example_RunUsingAPT/failure3/Dockerfile docker
  • ubuntu latest build
tests/dockerfile/checks/example_RunUsingAPT/success/Dockerfile docker
  • busybox 1.0 build
Dockerfile docker
  • python 3.11-slim build
Pipfile.lock pypi
  • 186 dependencies
tests/common/sca/reachability/nodejs/examples/package_json/package_json_with_alias/package.json npm
pyproject.toml pypi
setup.py pypi
  • aiodns <4.0.0,>=3.0.0
  • aiohttp <3.15.0,>=3.8.0
  • aiomultiprocess <0.10.0,>=0.9.0
  • argcomplete <4.0.0,>=3.0.0
  • asteval ==1.0.6
  • bc-detect-secrets ==1.5.52
  • bc-jsonpath-ng ==1.6.1
  • bc-python-hcl2 ==0.4.3
  • boto3 ==1.35.49
  • cachetools >=5.2.0,<6.0.0
  • charset-normalizer <4.0.0,>=3.1.0
  • click <9.0.0,>=8.1.0
  • cloudsplaining <0.8.0,>=0.7.0
  • colorama <0.5.0,>=0.4.3
  • configargparse >=1.5.3,<2.0.0
  • cyclonedx-python-lib <8.0.0,>=6.0.0
  • docker >=6.0.1,<8.0.0
  • dockerfile-parse >=2.0.0,<3.0.0
  • dpath ==2.1.3
  • ecdsa <1.0.0,>=0.19.0
  • gitpython <4.0.0,>=3.1.30
  • importlib-metadata <8.0.0,>=6.0.0
  • jmespath >=1.0.0,<2.0.0
  • jsonschema <5.0.0,>=4.17.0
  • junit-xml >=1.9,<2.0
  • license-expression <31.0.0,>=30.1.0
  • networkx <2.7
  • packageurl-python >=0.11.1,<0.14.0
  • packaging <24.0,>=23.0
  • platformdirs >=4.0.0,<5.0.0
  • prettytable <4.0.0,>=3.6.0
  • pycep-parser ==0.5.1
  • pydantic >=2.0.0,<3.0.0
  • pyston ==2.3.5
  • pyston-autoload ==2.3.5
  • pyyaml >=6.0.0,<7.0.0
  • requests <3.0.0,>=2.28.0
  • rustworkx >=0.13.0,<1.0.0
  • schema <=0.7.5
  • spdx-tools <0.9.0,>=0.8.0
  • tabulate <0.10.0,>=0.9.0
  • termcolor >=1.1.0,<2.4.0
  • tqdm >=4.65.0,<5.0.0
  • typing-extensions <5.0.0,>=4.5.0
  • urllib3 >=1.26.20
  • yarl >=1.9.1,<2.0.0
tests/sca_package_2/examples/requirements.txt pypi
  • django ==1.2 test
  • flask ==0.6 test
  • requests ==2.26.0 test
docs/Gemfile rubygems
  • github-pages >= 0
  • jekyll-feed ~> 0.11
  • jekyll-get-json ~> 1.0
  • jekyll-redirect-from >= 0
  • jekyll-remote-theme >= 0
  • tzinfo ~> 1.2
  • tzinfo-data >= 0
  • wdm ~> 0.1.1
tests/dockerfile/checks/example_AddExists/failure/Dockerfile docker
  • base latest build
tests/dockerfile/checks/example_AliasIsUnique/success/Dockerfile docker
  • debian jesse1 build
tests/dockerfile/checks/example_ReferenceLatestTag/failure_default_version_tag/Dockerfile docker
  • alpine latest build
tests/dockerfile/checks/example_RootUser/success/Dockerfile docker
  • base latest build
tests/dockerfile/checks/example_RunUsingAPT/failure2/Dockerfile docker
  • ubuntu latest build
tests/dockerfile/graph_builder/checks/resources/RunUnsafeCurl/pass/Dockerfile docker
  • alpine 3.5 build
tests/sca_package_2/examples/Microsoft.NET.Sdk.csproj nuget
  • AWSSDK.S3 3.7.101.28
  • DSInternals.Common 4.7.0
  • EnumStringValues 4.0.0
  • Newtonsoft.Json 13.0.1
  • SendGrid 9.28.1
  • TinyMCE 6.3.0
  • jQuery 3.0.0
  • log4net 2.0.9
tests/sca_image/examples/dockerfile/Dockerfile docker
  • ubuntu latest build
tests/secrets/git_history/testing_repo/git_to_change/description cran
tests/dockerfile/resources/wildcard_skip/Dockerfile docker
  • python 3.10-alpine build
tests/dockerfile/checks/example_WorkdirIsAbsolute/success/Dockerfile docker
  • alpine 3.5 build
tests/dockerfile/graph_builder/checks/resources/EnvPipTrustedHost/pass/Dockerfile docker
  • python 3 build
tests/dockerfile/resources/expose_port/fail/Dockerfile docker
  • node alpine build
tests/sca_package_2/examples/package-lock.json npm
  • bytes 0.1.0
  • commander 0.6.1
  • connect 2.6.0
  • cookie 0.0.4
  • crc 0.2.0
  • debug 4.3.3
  • express 3.0.0
  • formidable 1.0.11
  • fresh 0.1.0
  • lodash 3.1.0
  • methods 0.0.1
  • mime 1.2.6
  • mkdirp 0.3.3
  • ms 2.1.2
  • pause 0.0.1
  • qs 0.5.1
  • range-parser 0.0.4
  • send 0.0.4
  • send 0.1.0
tests/dockerfile/graph_builder/checks/resources/EnvPythonHttpsVerify/pass/Dockerfile docker
  • alpine 3.5 build
.github/workflows/codeql-analysis.yml actions
  • actions/checkout 11bd71901bbe5b1630ceea73d27597364c9af683 composite
  • actions/setup-python 39cd14951b08e74b54015e9e001cdefcf80e669f composite
  • github/codeql-action/analyze 45775bd8235c68ba998cffa5171334d58593da47 composite
  • github/codeql-action/autobuild 45775bd8235c68ba998cffa5171334d58593da47 composite
  • github/codeql-action/init 45775bd8235c68ba998cffa5171334d58593da47 composite
  • tj-actions/verify-changed-files a1c6acee9df209257a246f2cc6ae8cb6581c1edf composite
.github/workflows/security-shared.yml actions
  • actions/checkout 11bd71901bbe5b1630ceea73d27597364c9af683 composite
  • bridgecrewio/checkov-action master composite
  • edplato/trufflehog-actions-scan 0af17d9dd1410283f740eb76b0b8f6b696cadefc composite
  • jpetrucciani/bandit-check 74c5ecc4297e374c7e9283bc81f649287bb14f34 composite
.github/workflows/jekyll-gh-pages.yml actions
  • actions/checkout 11bd71901bbe5b1630ceea73d27597364c9af683 composite
  • actions/configure-pages 983d7736d9b0ae728b81ab479565c72886d7745b composite
  • actions/deploy-pages d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e composite
  • actions/jekyll-build-pages 44a6e6beabd48582f863aeeb6cb2151cc1716697 composite
  • actions/upload-pages-artifact 0252fc4ba7626f0298f0cf00902a25c6afc77fa8 composite
.github/workflows/pipenv-update.yml actions
  • actions/checkout 11bd71901bbe5b1630ceea73d27597364c9af683 composite
  • actions/setup-python 39cd14951b08e74b54015e9e001cdefcf80e669f composite
  • crazy-max/ghaction-import-gpg e89d40939c28e39f97cf32126055eeae86ba74ec composite
  • peter-evans/create-pull-request 271a8d0340265f705b14b6d32b9829c1cb33d45e composite
tests/dockerfile/checks/example_ReferenceLatestTag/failure_latest_version_tag/Dockerfile docker
  • alpine latest build
tests/dockerfile/checks/example_ReferenceLatestTag/success/Dockerfile docker
  • alpine 3 build
tests/dockerfile/graph_builder/checks/resources/EnvGitSslNoVerify/pass/Dockerfile docker
  • alpine 3.5 build
tests/dockerfile/graph_builder/checks/resources/EnvNodeTlsRejectUnauthorized/pass/Dockerfile docker
  • alpine 3.5 build
tests/dockerfile/graph_builder/checks/resources/EnvNpmConfigStrictSsl/pass/Dockerfile docker
  • node 18 build
tests/secrets/custom_regex_detector/Dockerfile docker
  • base 1 build
.github/workflows/security.yml actions
tests/dockerfile/checks/example_ExposePort22/failure_tcp/Dockerfile docker
  • busybox latest build
tests/dockerfile/graph_builder/checks/resources/RunRpmNoSignature/fail/Dockerfile docker
  • fedora rawhide build
tests/common/sca/reachability/nodejs/examples/package_json/package_json_with_aliasify/package.json npm
Pipfile pypi
  • aioresponses * develop
  • bandit * develop
  • boto3-stubs-lite * develop
  • coverage ==7.6.1 develop
  • coverage-badge * develop
  • dlint * develop
  • exceptiongroup * develop
  • flake8 * develop
  • flake8-bugbear * develop
  • importlib-resources >=1.3 develop
  • iniconfig * develop
  • jsonschema * develop
  • mypy * develop
  • parameterized * develop
  • pre-commit * develop
  • pytest <8.0.0 develop
  • pytest-asyncio * develop
  • pytest-benchmark * develop
  • pytest-cov * develop
  • pytest-forked * develop
  • pytest-mock * develop
  • pytest-timeout * develop
  • pytest-xdist * develop
  • responses * develop
  • setuptools ==78.1.1 develop
  • time-machine * develop
  • tomli * develop
  • types-cachetools >=5.2.0,<6.0.0 develop
  • types-colorama <0.5.0,>=0.4.3 develop
  • types-jmespath >=1.0.0,<2.0.0 develop
  • types-jsonschema >=4.17.0,<5.0.0 develop
  • types-pyyaml >=6.0.0,<7.0.0 develop
  • types-requests >=2.28.0,<3.0.0 develop
  • types-tabulate >=0.9.0,<0.10.0 develop
  • types-tqdm >=4.65.0,<5.0.0 develop
  • types-urllib3 * develop
  • urllib3-mock * develop
  • aiodns >=3.0.0,<4.0.0
  • aiohttp >=3.8.0,<3.15.0
  • aiomultiprocess >=0.9.0,<0.10.0
  • argcomplete >=3.0.0,<4.0.0
  • asteval ==1.0.6
  • bc-detect-secrets ==1.5.52
  • bc-jsonpath-ng ==1.6.1
  • bc-python-hcl2 ==0.4.3
  • boto3 ==1.35.49
  • cachetools >=5.2.0,<6.0.0
  • charset-normalizer >=3.1.0,<4.0.0
  • click >=8.1.0,<9.0.0
  • cloudsplaining >=0.7.0,<0.8.0
  • colorama >=0.4.3,<0.5.0
  • configargparse >=1.5.3,<2.0.0
  • cyclonedx-python-lib >=6.0.0,<8.0.0
  • docker >=6.0.1,<8.0.0
  • dockerfile-parse >=2.0.0,<3.0.0
  • dpath ==2.1.3
  • ecdsa >=0.19.0,<1.0.0
  • gitpython >=3.1.30,<4.0.0
  • importlib-metadata >=6.0.0,<8.0.0
  • jmespath >=1.0.0,<2.0.0
  • jsonschema >=4.17.0,<5.0.0
  • junit-xml >=1.9,<2.0
  • license-expression >=30.1.0,<31.0.0
  • networkx <2.7
  • packageurl-python >=0.11.1,<0.14.0
  • packaging >=23.0,<24.0
  • platformdirs >=4.0.0,<5.0.0
  • prettytable >=3.6.0,<4.0.0
  • pycep-parser ==0.5.1
  • pydantic >=2.0.0,<3.0.0
  • pyston ==2.3.5
  • pyston-autoload ==2.3.5
  • pyyaml >=6.0.0,<7.0.0
  • requests >=2.28.0,<3.0.0
  • rustworkx >=0.13.0,<1.0.0
  • schema <=0.7.5
  • spdx-tools >=0.8.0,<0.9.0
  • tabulate >=0.9.0,<0.10.0
  • termcolor >=1.1.0,<2.4.0
  • tqdm >=4.65.0,<5.0.0
  • typing-extensions >=4.5.0,<5.0.0
  • urllib3 >=1.26.20
  • yarl >=1.9.1,<2.0.0
tests/dockerfile/checks/example_MaintainerExists/failure/Dockerfile docker
  • base latest build
tests/dockerfile/checks/example_UpdateNotAlone/failure/Dockerfile docker
  • base 1 build
tests/dockerfile/checks/example_WorkdirIsAbsolute/failure/Dockerfile docker
  • alpine 3.5 build
tests/dockerfile/graph_builder/checks/resources/RunAptGetForceYes/fail/Dockerfile docker
  • debian bullseye build
tests/dockerfile/graph_builder/checks/resources/RunNpmConfigSetStrictSsl/pass/Dockerfile docker
  • node 18 build
tests/dockerfile/graph_builder/checks/resources/RunUsingSudo/fail/Dockerfile docker
  • busybox latest build
tests/dockerfile/graph_builder/checks/resources/RunUsingSudo/fail_multiline/Dockerfile docker
  • busybox latest build
tests/dockerfile/graph_builder/checks/resources/RunYumNoGpgCheck/pass/Dockerfile docker
  • fedora rawhide build
.github/workflows/pr-test.yml actions
  • actions/checkout 11bd71901bbe5b1630ceea73d27597364c9af683 composite
  • actions/setup-node cdca7365b2dadb8aad0a33bc7601856ffabcc48e composite
  • actions/setup-python 39cd14951b08e74b54015e9e001cdefcf80e669f composite
  • azure/setup-helm 5119fcb9089d432beecbf79bb2c7915207344b78 composite
  • imranismail/setup-kustomize a76db1c6419124d51470b1e388c4b29476f495f1 composite
  • tj-actions/changed-files ed68ef82c095e0d48ec87eccea555d944a631a4c composite
tests/dockerfile/checks/example_ExposePort22/failure/Dockerfile docker
  • busybox latest build
tests/dockerfile/checks/example_ReferenceLatestTag/success_multi_stage_capital/Dockerfile docker
  • alpine 3 build
  • base latest build
tests/dockerfile/checks/example_RunUsingAPT/success2/Dockerfile docker
  • ubuntu latest build
tests/dockerfile/graph_builder/checks/resources/RunApkAllowUntrusted/pass/Dockerfile docker
  • alpine 3.5 build
tests/dockerfile/resources/expose_port/pass/Dockerfile docker
  • gliderlabs/alpine 3.3 build
tests/secrets/resources/file_type/Dockerfile docker
  • base 1 build
tests/sca_package_2/examples/go.mod go
  • github.com/abbot/go-http-auth v0.4.0
  • github.com/aryszka/jobqueue v0.0.2
  • github.com/cenkalti/backoff v2.2.1+incompatible
  • github.com/cjoudrey/gluahttp v0.0.0-20190104103309-101c19a37344
  • github.com/cjoudrey/gluaurl v0.0.0-20161028222611-31cbb9bef199
  • github.com/codahale/hdrhistogram v0.0.0-20161010025455-3a0bb77429bd
  • github.com/coreos/go-oidc v2.0.0+incompatible
  • github.com/dgrijalva/jwt-go v3.2.0+incompatible
  • github.com/dimfeld/httppath v0.0.0-20170720192232-ee938bf73598
  • github.com/felixge/httpsnoop v1.0.0
  • github.com/ghodss/yaml v1.0.0
  • github.com/go-redis/redis/v8 v8.3.3
  • github.com/google/go-cmp v0.5.2
  • github.com/hashicorp/memberlist v0.1.4
  • github.com/instana/go-sensor v1.4.16
  • github.com/lightstep/lightstep-tracer-go v0.24.1-0.20210318180546-a67254760a58
  • github.com/looplab/fsm v0.1.0
  • github.com/miekg/dns v1.1.41
  • github.com/oklog/ulid v1.3.1
  • github.com/opentracing/basictracer-go v1.0.0
  • github.com/opentracing/opentracing-go v1.1.0
  • github.com/pkg/errors v0.8.1
  • github.com/pquerna/cachecontrol v0.0.0-20180517163645-1555304b9b35
  • github.com/prometheus/client_golang v1.0.0
  • github.com/rcrowley/go-metrics v0.0.0-20181016184325-3113b8401b8a
  • github.com/sanity-io/litter v1.1.0
  • github.com/sarslanhan/cronmask v0.0.0-20190709075623-766eca24d011
  • github.com/shirou/gopsutil v3.21.2+incompatible
  • github.com/sirupsen/logrus v1.4.2
  • github.com/sony/gobreaker v0.4.1
  • github.com/stretchr/testify v1.6.1
  • github.com/szuecs/rate-limit-buffer v0.7.1
  • github.com/szuecs/routegroup-client v0.17.7
  • github.com/tidwall/gjson v1.7.4
  • github.com/tklauser/go-sysconf v0.3.5
  • github.com/uber-go/atomic v1.4.0
  • github.com/uber/jaeger-client-go v2.16.0+incompatible
  • github.com/uber/jaeger-lib v2.0.0+incompatible
  • github.com/yookoala/gofast v0.6.0
  • github.com/yuin/gopher-lua v0.0.0-20200603152657-dc2b0ca8b37e
  • go.uber.org/atomic v1.4.0
  • golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9
  • golang.org/x/net v0.0.0-20210415231046-e915ea6b2b7d
  • golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45
  • golang.org/x/sync v0.0.0-20210220032951-036812b2e83c
  • golang.org/x/sys v0.0.0-20210415045647-66c3f260301c
  • golang.org/x/tools v0.1.0
  • google.golang.org/grpc v1.22.0
  • gopkg.in/alecthomas/kingpin.v2 v2.2.6
  • gopkg.in/square/go-jose.v2 v2.3.1
  • gopkg.in/yaml.v2 v2.4.0
  • k8s.io/api v0.18.6
  • k8s.io/apimachinery v0.18.6
  • layeh.com/gopher-json v0.0.0-20190114024228-97fed8db8427
tests/sca_package_2/examples/go.sum go
  • 400 dependencies
checkov.spec rpm
.github/workflows/coverage.yaml actions
  • actions/checkout 11bd71901bbe5b1630ceea73d27597364c9af683 composite
  • actions/setup-python 39cd14951b08e74b54015e9e001cdefcf80e669f composite
  • azure/setup-helm 5119fcb9089d432beecbf79bb2c7915207344b78 composite
  • crazy-max/ghaction-import-gpg e89d40939c28e39f97cf32126055eeae86ba74ec composite
  • imranismail/setup-kustomize a76db1c6419124d51470b1e388c4b29476f495f1 composite
.github/workflows/pr-title.yml actions
  • thehanimo/pr-title-checker 7fbfe05602bdd86f926d3fb3bccb6f3aed43bc70 composite
.github/workflows/build.yml actions
  • actions/checkout 11bd71901bbe5b1630ceea73d27597364c9af683 composite
  • actions/setup-node cdca7365b2dadb8aad0a33bc7601856ffabcc48e composite
  • actions/setup-python 39cd14951b08e74b54015e9e001cdefcf80e669f composite
  • azure/setup-helm 5119fcb9089d432beecbf79bb2c7915207344b78 composite
  • crazy-max/ghaction-import-gpg e89d40939c28e39f97cf32126055eeae86ba74ec composite
  • imranismail/setup-kustomize a76db1c6419124d51470b1e388c4b29476f495f1 composite
  • pypa/gh-action-pypi-publish 76f52bc884231f62b9a034ebfe128415bbaabdfc composite
tests/dockerfile/checks/example_HealthcheckExists/failure/Dockerfile docker
  • base latest build
tests/dockerfile/checks/example_ReferenceLatestTag/success_multi_stage/Dockerfile docker
  • alpine 3 build
  • base latest build
tests/dockerfile/checks/example_ReferenceLatestTag/success_scratch/Dockerfile docker
  • scratch latest build
tests/dockerfile/checks/example_RunUsingAPT/failure/Dockerfile docker
  • busybox 1.0 build
tests/dockerfile/graph_builder/checks/resources/RunApkAllowUntrusted/fail/Dockerfile docker
  • alpine 3.5 build
tests/dockerfile/graph_builder/checks/resources/RunRpmNoSignature/pass/Dockerfile docker
  • fedora rawhide build
tests/dockerfile/resources/expose_port/skip/Dockerfile docker
  • gliderlabs/alpine 3.3 build
tests/dockerfile/checks/example_AliasIsUnique/failure/Dockerfile docker
  • baseImage latest build
  • debian jesse2 build
  • debian jesse1 build
tests/dockerfile/checks/example_AliasIsUnique/success_platform/Dockerfile docker
  • node 16 build
tests/dockerfile/checks/example_ReferenceLatestTag/success_multi_stage_platform/Dockerfile docker
  • build latest build
  • python 3.11-slim build
tests/dockerfile/checks/example_RunUsingAPT/success3/Dockerfile docker
  • cypress/included 13.6.1 build
tests/dockerfile/checks/example_UpdateNotAlone/success/Dockerfile docker
  • base latest build
tests/dockerfile/checks/example_UserExists/failure/Dockerfile docker
  • base latest build
tests/dockerfile/graph_builder/checks/resources/RunAptGetAllowUnauthenticated/fail/Dockerfile docker
  • debian bullseye build
tests/dockerfile/graph_builder/checks/resources/RunAptGetAllowUnauthenticated/pass/Dockerfile docker
  • debian bullseye build
tests/dockerfile/graph_builder/checks/resources/RunChpasswd/fail/Dockerfile docker
  • ubuntu 20.04 build
tests/dockerfile/resources/empty_dockerfile/Dockerfile docker
tests/dockerfile/resources/multiline_command/Dockerfile docker
  • docker.io/library/ubuntu 22.04 build
tests/sca_package_2/examples/package.json npm
  • express 3.0.0
  • lodash 3.1.0
tests/dockerfile/checks/example_RootUser/failure/Dockerfile docker
  • base latest build
tests/dockerfile/graph_builder/checks/resources/RunChpasswd/pass/Dockerfile docker
  • ubuntu 20.04 build
tests/secrets/long_line_custom_regex_detector/Dockerfile docker
  • base 1 build
tests/dockerfile/checks/example_UserExists/success/Dockerfile docker
  • base latest build
tests/dockerfile/graph_builder/checks/resources/RunYumConfigManagerSslVerify/pass/Dockerfile docker
  • fedora rawhide build
tests/common/sca/reachability/nodejs/examples/mix/package_json_with_alias/package.json npm
kubernetes/requirements.txt pypi
  • checkov ==3.3.26