checkov

Checkov is a tool that performs static code analysis and software component analysis for container images and open source packages with infrastructure (IaC) files as code. Terraform scans various formats such as Kubernetes, CloudFormation and Dockerfile to detect security, compatibility configuration errors and vulnerabilities. With Graph-based scanning support and a built-in policy library, you capture risks in cloud infrastructure during the build phase.