Checkov & IaC scanning

Name: Checkov & IaC scanning
Availability: InStock

A standalone path through IaC security scanning, centered on Checkov and covering the wider scanner family. Beginner covers what IaC scanning finds, installing Checkov, running scans, and reading results. Intermediate builds real usage: the rule catalog and severities, suppressions done right, custom policies (Python and YAML), and scanning plans vs code. Advanced goes deep: the scanner landscape (tfsec/Trivy, Terrascan, KICS, Snyk IaC), SBOM/secrets/image overlap, baselines and drift, and enforcing in CI/CD without alert fatigue. Real scanner output throughout; each level ends with a self-test feeding a rotating final exam.

Intermediate3 sections · 12 lessons · ~5h total · 12-question self-test

Start course

Checkov fundamentals

4 lessons

01What IaC scanning findsMisconfigurations, before deploy.12 min 02Install & first scancheckov -d and reading results.10 min 03Reading & triaging findingsChecks, severity, guides.12 min 04Frameworks: Terraform, k8s, moreOne tool, many IaC types.10 min

Suppressions, custom policy & baselines

4 lessons

01Suppressions done rightSkip with a reason, not blindly.14 min 02Custom policiesYAML and Python checks.14 min 03Scanning plan vs codeCatch what only appears at plan.12 min 04Baselines & incremental adoptionOnboard a legacy repo sanely.12 min

Landscape, CI/CD & program

4 lessons

01The scanner landscapetfsec/Trivy, Terrascan, KICS, Snyk.14 min 02Secrets, SBOM & image overlapWhere scanners meet.12 min 03Enforcing in CI/CDGate without alert fatigue.14 min 04Running it as a programPolicy, exceptions, metrics.12 min

Progress is saved in this browser only — no account required.

Final exam

Test yourself on everything

12 questions drawn from all 3 sections — every answer explained as you pick.

Start final exam