checkov
Install command:
brew install checkovPrevent cloud misconfigurations during build-time for IaC tools
License: Apache-2.0
Development: Pull requests
Formula JSON API: /api/formula/checkov.json
Formula code: checkov.rb on GitHub
Bottle (binary package) installation support provided for:
| macOS on Apple Silicon |
tahoe | ✅ |
|---|---|---|
| sequoia | ✅ | |
| sonoma | ✅ | |
| macOS on Intel |
sonoma | ✅ |
| Linux | ARM64 | ✅ |
| x86_64 | ✅ | |
Current versions:
| stable | ✅ | 3.3.10 |
Depends on:
| certifi | 2026.7.22 | Mozilla CA bundle for Python |
| cffi | 2.1.1 | C Foreign Function Interface for Python |
| libyaml | 0.2.5 | YAML Parser |
| numpy | 2.5.2 | Package for scientific computing with Python |
| pydantic | 2.13.5 | Data validation using Python type hints |
| python@3.14 | 3.14.7 | Interpreted, interactive, object-oriented programming language |
| rpds-py | 2026.6.3 | Python bindings to Rust's persistent data structures |
Depends on when building from source:
| cmake | 4.4.3 | Cross-platform make |
| rust | 1.98.0 | Safe, concurrent, practical language |
Known vulnerabilities in the current version:
| GHSA-wj6h-64fc-37mp (high) | Minerva timing attack on P-256 in python-ecdsa |
| GHSA-89v8-rhwq-hf77 (medium) | asteval has a Sandbox Escape via BaseException Subclasses |
| GHSA-9w56-46f6-3qhx (medium) | asteval Sandbox Escape: arbitrary native memory read/write via numpy ctypes in default asteval In... |
Data from Homebrew/advisory-database. Run brew vulns checkov for a live check.
Analytics:
| 30 days | 90 days | 365 days | |
|---|---|---|---|
| Installs | 3,776 | 10,335 | 34,634 |
Installs (--HEAD) | 6 | 15 | 49 |
| Installs on Request | 3,774 | 10,326 | 34,563 |
Installs on Request (--HEAD) | 6 | 15 | 49 |
| Build Errors | 0 |