Checkov Skills

Integrate Checkov into CI/CD pipelines with GitHub Actions — IaC scanning with baseline support, severity gating, SARIF uploads, and compliance reporting.

Create custom Checkov checks in Python and YAML for organization-specific security standards — attribute validation, resource relationship rules, and naming conventions.

Scan Terraform configurations for security misconfigurations with Checkov — detect unencrypted resources, overly permissive IAM, public access, and missing logging.