Use when infrastructure code (Terraform, CloudFormation, Kubernetes, Helm, ARM, Serverless, CDK) needs security scanning with the broadest built-in rule set: Checkov with custom Python checks, SARIF and JUnit output, and a baseline so CI fails only on new findings. Single-tool option: trivy-config.
87%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
Passed
No findings from the security scan
{
"name": "testland/checkov-policy",
"version": "1.1.16",
"summary": "Use when infrastructure code (Terraform, CloudFormation, Kubernetes, Helm, ARM, Serverless, CDK) needs security scanning with the broadest built-in rule set: Checkov with custom Python checks, SARIF and JUnit output, and a baseline so CI fails only on new findings. Single-tool option: trivy-config.",
"private": false,
"skills": {
"checkov-policy": {
"path": "SKILL.md"
}
}
}