Checkov & IaC scanning

Checkov finds misconfigured Terraform, Kubernetes, and similar IaC before you apply it. This course shows how to install it, read a report, suppress findings without hiding them forever, write a custom check, and scan a plan JSON as well as the source. It also covers when a second scanner such as Trivy is worth adding, and how to fail CI on new issues without paging the team for a ten-year-old repo. Scanning does not fix the resource; someone still has to change the code.