Checkov on Ubuntu 24.04 LTS
by cloudimg
Checkov IaC policy scanning on Ubuntu 24.04 by cloudimg - catch misconfigs before you deploy
Checkov on Ubuntu 24.04 LTS
Checkov is an open-source static-analysis scanner for infrastructure as code. It parses Terraform, CloudFormation, Kubernetes, Helm, ARM, Bicep, Serverless and Dockerfiles and evaluates them against thousands of built-in policies, reporting exactly where declared infrastructure would violate a security or compliance rule - an object store with no encryption, a security group open to the whole internet, a container that runs as root - and naming the policy, file and line for every finding. Its exit code lets a CI job block a merge on a failing policy, so insecure infrastructure is caught in code review rather than after it is live.
This cloudimg image is a ready-to-run scanning host, not just the package:
- Checkov 3.3.8 installed from PyPI into an isolated virtualenv, pinned and scanned clean of fixable vulnerabilities before the image is sealed
- A simple checkov command on the path, plus a first-boot service that self-verifies the scanner on your own instance
- A daily timer that scans a drop-in directory and writes its report to a log, so you get continuous coverage of the IaC you keep on the instance
- Secure by default: no web UI, no listening service, no admin account and no password - SSH on port 22 is the only open port, and no credential is baked into the image
This is a command-line product; drive it over SSH. Licensing is Apache-2.0 and free - the cloudimg charge covers packaging, security patching, image maintenance and 24/7 expert support.
Recommended size: Standard_B2s. Target users: platform and security engineers shifting cloud security left into code review, engineers gating infrastructure changes in CI, and anyone who wants a self-hosted policy-as-code scanner they own inside their own cloud account. Prerequisites: an Azure subscription, a VNet and an SSH key; the NSG should permit port 22 from your admin networks and allow outbound HTTPS.
Deployment guide: https://www.cloudimg.co.uk/guides/checkov-on-ubuntu-24-04-azure/
24/7 support: support@cloudimg.co.uk