🛡️

iac-checkov

Name: iac-checkov
Author: AgentSecOps

Seguro 🌐 Acesso à rede📁 Acesso ao sistema de arquivos🔑 Variáveis de ambiente⚙️ Comandos externos

فحص البنية التحتية كـ كود للأمان

المراجعة اليدوية لملفات Terraform وKubernetes وCloudFormation تفوت أخطاء التكوين الحرجة. تدمج هذه المهارة Checkov لفحص IaC تلقائيًا وفقًا لأكثر من 750 سياسة أمنية، واكتشاف ثغرات التشفير والصلاحيات المفرطة وانتهاكات الامتثال قبل النشر.

Suporta: Claude Codex Code(CC)

🥉 75 Bronze

Baixar o ZIP da skill

Upload no Claude

Vá em Configurações → Capacidades → Skills → Upload skill

Ative e comece a usar

Testar

A utilizar "iac-checkov". افحص ملفات Terraform الخاصة بي بحثًا عن مشاكل الأمان

Resultado esperado:

CRITICAL: S3 bucket allows public access (CKV_AWS_93)
File: terraform/s3.tf:15
Issue: BlockPublicAcls is set to false
Fix: Set block_public_acls = true in PublicAccessBlockConfiguration
HIGH: Security group allows 0.0.0.0/0 on port 22 (CKV_AWS_23)
File: terraform/security.tf:28
Issue: Ingress rule permits SSH from any IP
Fix: Restrict cidr_blocks to corporate VPN range
Summary: 2 CRITICAL, 1 HIGH, 3 MEDIUM findings

A utilizar "iac-checkov". تحقق من Kubernetes pods بحثًا عن رفع الصلاحيات

Resultado esperado:

HIGH: Pod allows privilege escalation (CKV_K8S_30)
File: k8s/app-pod.yaml:12
Issue: securityContext.allowPrivilegeEscalation is true
Fix: Set allowPrivilegeEscalation = false
MEDIUM: Container runs as root (CKV_K8S_20)
File: k8s/app-pod.yaml:8
Issue: securityContext.runAsNonRoot is not set
Fix: Set runAsNonRoot = true and runAsUser > 1000

Auditoria de Segurança

Seguro

v5 • 1/16/2026

Documentation-only skill with no executable code. Contains YAML configuration templates and markdown guides for Checkov, an open-source IaC security scanner. All 300 static findings are false positives caused by scanner misinterpreting documentation text (check IDs, URLs, security examples) as malicious patterns.

Arquivos analisados

2,694

Linhas analisadas

achados

Total de auditorias

Fatores de risco

🌐 Acesso à rede (39)

assets/checkov_config.yaml:75 assets/pre_commit_config.yaml:9 assets/pre_commit_config.yaml:30 assets/pre_commit_config.yaml:50 assets/pre_commit_config.yaml:63 assets/pre_commit_config.yaml:76 assets/pre_commit_config.yaml:87 references/compliance_mapping.md:232 references/compliance_mapping.md:233 references/compliance_mapping.md:234 references/compliance_mapping.md:235 references/compliance_mapping.md:236 references/compliance_mapping.md:237 references/compliance_mapping.md:14 references/custom_policies.md:210 references/custom_policies.md:287 references/custom_policies.md:458 references/custom_policies.md:459 references/custom_policies.md:460 references/suppression_guide.md:430 references/suppression_guide.md:431 references/suppression_guide.md:29 references/suppression_guide.md:188 references/suppression_guide.md:198 references/suppression_guide.md:340 skill-report.json:6 skill-report.json:133 SKILL.md:19 SKILL.md:20 SKILL.md:21 SKILL.md:285 SKILL.md:666 SKILL.md:667 SKILL.md:668 SKILL.md:669 SKILL.md:670 SKILL.md:671 SKILL.md:366 SKILL.md:611

📁 Acesso ao sistema de arquivos (3)

assets/checkov_config.yaml:27 assets/github_actions.yml:176 assets/github_actions.yml:176

🔑 Variáveis de ambiente (1)

assets/checkov_config.yaml:74

⚙️ Comandos externos (184)

Auditado por: claude Ver Histórico de Auditoria →

Pontuação de qualidade

Arquitetura

100

Manutenibilidade

Conteúdo

Comunidade

100

Segurança

Conformidade com especificações

O Que Você Pode Construir

بوابات الأمان في CI/CD

حظر عمليات النشر التي تحتوي على مشاكل بدرجة CRITICAL أو HIGH من خلال دمج فحوصات Checkov في GitHub Actions أو GitLab CI pipelines.

تخطيط الامتثال

إنشاء تقارير تربط نتائج IaC بمتطلبات CIS وPCI-DSS وHIPAA وSOC2 للتحضير للمراجعة.

تطبيق السياسات المخصصة

تحديد سياسات أمنية خاصة بالمؤسسة تتجاوز الفحوصات المضمنة لفرض اصطلاحات التسمية ومتطلبات الوسوم.

Tente Estes Prompts

فحص Terraform الأساسي

Run Checkov to scan my Terraform files in the infrastructure/ directory. Show all HIGH and CRITICAL findings with file paths, line numbers, and remediation guidance.

أمان Kubernetes

Scan Kubernetes manifests in the k8s/ directory using Checkov. Focus on pod security standards, privilege escalation risks, and container security context issues.

تقرير الامتثال

Run a Checkov compliance scan against CIS AWS Foundations benchmark. Generate a JSON report and summarize which controls are passing and failing.

سياسة مخصصة

Help me write a custom Checkov policy in Python that ensures all S3 buckets have encryption enabled and are blocked from public access. Include the check logic and how to load it.