checkov

Install command: 
brew install checkov

Prevent cloud misconfigurations during build-time for IaC tools

https://www.checkov.io/

License: Apache-2.0

Development: Pull requests

Formula JSON API: /api/formula/checkov.json

Formula code: checkov.rb on GitHub

Bottle (binary package) installation support provided for:

macOS on
Apple Silicon		 golden gate ✅
tahoe ✅
sequoia ✅
Linux ARM64 ✅
x86_64 ✅

Current versions:

stable ✅ 3.3.10

Revision: 1

Depends on:

certifi 2026.7.22 Mozilla CA bundle for Python
cffi 2.1.1 C Foreign Function Interface for Python
libyaml 0.2.5 YAML Parser
numpy 2.5.3 Package for scientific computing with Python
pydantic 2.13.5 Data validation using Python type hints
python@3.14 3.14.7 Interpreted, interactive, object-oriented programming language
rpds-py 2026.6.3 Python bindings to Rust's persistent data structures

Depends on when building from source:

cmake 4.4.3 Cross-platform make
rust 1.98.1 Safe, concurrent, practical language

Uses from macOS: libffi

Binaries: checkov, checkov.cmd

Known vulnerabilities in the current version:

GHSA-wj6h-64fc-37mp (high) Minerva timing attack on P-256 in python-ecdsa
GHSA-89v8-rhwq-hf77 (medium) asteval has a Sandbox Escape via BaseException Subclasses
GHSA-9w56-46f6-3qhx (medium) asteval Sandbox Escape: arbitrary native memory read/write via numpy ctypes in default asteval In...

Data from Homebrew/advisory-database. Run brew vulns checkov for a live check.

Analytics:

30 days90 days365 days
Installs1,2727,81233,297
Installs (--HEAD)11145
Installs on Request1,2717,80433,234
Installs on Request (--HEAD)11145
Build Errors0