Checkov scan
Run Checkov before every apply.
Workflow step
Any cloud
available
Placeholder. This template is not in the library yet. Deploy opens the platform so you can start from your own repository; tell us there if you want this one.
Downloads
Version
Published
License
Maintainer
StackGuardian
VerifiedAbout
Run Checkov before every apply.
Part of the StackGuardian template library. Deploy opens it in the platform with the inputs pre-filled; nothing runs until you approve.
Use cases
- Fail a run on high-severity misconfigurations.
- Show security findings next to the plan, not in a separate tool.
Inputs
Inputs are shown in the platform when you open the template.
What it creates
How it runs on StackGuardian
Add it to a workflow as a step. It runs in its own container alongside the IaC steps.
Plan
Policy check
Approval
Apply
Approvals happen in StackGuardian. An agent can never approve its own run. Every run keeps its plan, policy results and approver in the audit log.