checkov

Checkov is a static code analysis tool for Infrastructure as Code (IaC). It is also a software composition analysis (SCA) tool for images and open source packages. More information: https://www.checkov.io/1.Welcome/Quick%20Start.html.

checkov --directory path/to/directory

checkov --compact --file path/to/file

checkov --list