NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
PyPI · #1943 most downloaded on PyPI
Infrastructure as code static analysis
Last release 4 days ago
01 Oct 2026
Ships fairly regularly
a new release about every 2 weeks
Most releases are documented
notes for 49 of the last 60 stable releases
1 version withdrawn
withdrawn after publishing
7 years old
3768 releases · first in 2019
Nothing published for this version
github: Add ability for External checks with git branch - #5337
Nothing published for this version
One column per quarter.
Nothing published for this version
sca: add fix code and command to cve report - #5333
Nothing published for this version
kustomize: Added support for case where no parents are found for the relative fie path - #5332
Nothing published for this version
Nothing published for this version
kustomize: Support child k8s resources inside kustomize origin annotations - #5328
kustomize: Checked for existence of caller_file_path in definitions_raw - #5324
Nothing published for this version
general: support UTF-16 and other encodings in multiple frameworks - #5308
Nothing published for this version
secrets: Improve the entropy keyword combinator secret scanner - #5307
Nothing published for this version
dockerfile: add ARM build for K8s container image - #5293
Nothing published for this version
general: use sca inline suppressions - #5285
openapi: New OpenAPI check CKV_OPENAPI_20 - #5253
terraform: remove deprecated check CKV_GCP_67 - #5275
graph: add experimental debug output for graph check evaluation - #5257
Nothing published for this version
Nothing published for this version
terraform: add module check for commit hash revision usage - #5261
Nothing published for this version
Nothing published for this version
arm: consider encryption property in CKV_AZURE_2 - #5254
terraform: add missing AWS RDS CA certificate identifiers for aws_db_instance resource - #5247
general: remove log from parallel common - #5244
Nothing published for this version
terraform: ensure kms key policy is defined - #5235
Nothing published for this version
Nothing published for this version
dockerfile: negative is_dockerfile() lookup on .dockerignore suffix - #5219
Nothing published for this version
gha: add skip_path flag to GHA and allow multiple values in var_file - #5213
Nothing published for this version
arm: Handle another structure for SQL retention policy - #5210
Nothing published for this version
Nothing published for this version
sca: removing the using of the constant CHECKOV_DISPLAY_REGISTRY_URL - #5204
Nothing published for this version
general: add checkov_diff pre-commit hook for scanning all changed files - #5192
Nothing published for this version
arm: and bicep: Ensure that Azure Front Door uses WAF in "Detection" or "Prevention" modes CKV_AZURE_123 - #5049
Nothing published for this version
arm: Handle arm db servers 2021 05 01 - #5187
Nothing published for this version
terraform_plan: Expose field changes to python checks - #5112
Nothing published for this version
Nothing published for this version
kubernetes: dont' fail if spec is missing and default value is set to the fix value. - #5167
Nothing published for this version
arm: ARM and bicep checks for CKV_AZURE_121 - #5029
Nothing published for this version
Nothing published for this version
ansible: add support of inline suppression for Ansible graph checks - #5143
Nothing published for this version
Nothing published for this version
Your coding agent can read these notes before it upgrades. Set up the MCP server →