{"avoid_when":"只要运行时容器威胁检测或密钥泄露扫描","content_hash":"6eb578086a0d1d46053831d3b99170dc8aed985926660b6f6f4c3b94f62a11cf","domain":"security","evidence_urls":["https://github.com/bridgecrewio/checkov"],"id":"checkov","language":"Python","license":"Apache-2.0","name":"Checkov","niche":"iac scanning","repo":"https://github.com/bridgecrewio/checkov","source_updated_at":"2026-07-21T21:10:23Z","status":"active","summary":"基础设施即代码（IaC）静态安全与合规扫描。","tags":["iac","sast","scanning","security"],"use_when":"要在 CI 扫描 Terraform/K8s/Helm 等 IaC 配置风险","verification_status":"verified","verified_at":"2026-07-21T21:10:23Z"}