Checkov
Static analysis tool for infrastructure-as-code to detect security and compliance issues.
Linting and formatting PyPI Apache License 2.0
Used in agent projects
26
0.2% of 12,697 public repos built with AI coding agents
Rank in linting and formatting
#31 of 40
by use in those projects
Downloads
1.1M
PyPI, last 7 days, checkov
GitHub stars
9,061
last push Oct 7, 2026
How Checkov is used
Checkov is a dependency in 26 of the 12,697 public GitHub projects set up for AI coding agents that we scanned (0.2%), #31 of 40 in linting and formatting. The most used alternative there is ESLint. Projects that use it most often also use Diagrams (96.2%), Matplotlib (96.2%), Pillow (96.2%).
Often used with Checkov
| Diagrams | 96.2% of Checkov projects · 452.2× more than average |
|---|---|
| Matplotlib | 96.2% of Checkov projects · 62.9× more than average |
| Pillow | 96.2% of Checkov projects · 41.8× more than average |
| markdown-link-check | 88.5% of Checkov projects · 449.3× more than average |
| fast-xml-parser | 84.6% of Checkov projects · 185.2× more than average |
| jsdom | 84.6% of Checkov projects · 15.8× more than average |
| Lefthook | 84.6% of Checkov projects · 83.9× more than average |
| markdownlint-cli2 | 84.6% of Checkov projects · 147.2× more than average |
By coding agent
| GitHub Copilot | 0.9% of projects set up for it |
|---|
Share of public repos configured for each agent that list Checkov as a dependency.
Install
| Package | pip install checkov |
|---|---|
| Main stacks | Python (26) |
| Example projects | microsoft/edge-ai, jonathan-vella/azure-smb-rf |
Alternatives to Checkov
| Tool | Used in agent projects | Downloads / wk | GitHub stars | License |
|---|---|---|---|---|
| ESLint npm Linter that finds and fixes JavaScript code patterns based on AST analysis. |
4,833 (38.1%) | 162M | 27.6K | MIT |
| Prettier npm Opinionated code formatter for JavaScript, TypeScript, and related languages. |
2,218 (17.5%) | 138M | 52.4K | MIT |
| Biome npm Fast web toolchain providing linting, formatting and code quality all in one. |
445 (3.5%) | 17.7M | 25.9K | MIT OR Apache-2.0 |
| oxlint npm Fast JavaScript linter written in Rust with zero-config defaults. |
206 (1.6%) | 25.7M | 23K | MIT |
| Knip npm Find and fix unused dependencies, exports and files in TypeScript/JavaScript projects. |
150 (1.2%) | 17.5M | 12.4K | ISC |
| stylelint npm Linter that finds and fixes CSS errors and enforces code style conventions. |
140 (1.1%) | 10.8M | 11.5K | MIT |
| oxfmt npm Fast JavaScript formatter from the Oxc compiler project. |
125 (1.0%) | 16.3M | 23K | MIT |
| ESLint Import Resolver TypeScript npm ESLint plugin resolver adding TypeScript support to import/export linting. |
119 (0.9%) | 48.8M | 825 | ISC |