Checkov vs Dependency-Track : comparatif

Checkov vs Dependency-Track
Fait	Checkov	Dependency-Track
Langage	Python	Java
Licence	Apache-2.0	Apache-2.0
Étoiles	9.1k	4.3k
Dernière release	3.3.23	5.1.2
Dernier push	2026-10-06	2026-10-06
Rythme des releases	environ 6 jours entre les releases	environ 11 jours entre les releases
Contributeurs actifs	non compté	19+ auteurs de commits sur la branche par défaut ces 90 derniers jours
Signalements	aucun	aucun

Ce qui les relie

Les deux remplacent Snyk. Alternatives à Snyk →
PartielCheckovOnly the infrastructure as code checks, for Terraform, CloudFormation, Kubernetes and more.
PartielDependency-TrackContinuous monitoring of dependencies from SBOMs with policies, without fix pull requests.

3.3.232026-10-05sca: apply --skip-path regex and hidden-dir filtering to sca_package - #7712
3.3.212026-09-30terraform_json: handle HCL JSON array and single-dict block formats in parser - #7707
3.3.202026-09-27terraform_plan: skip resources being removed from state ('forget' action) - #7676
3.3.192026-09-17terraform: add CKV_AWS_394 for unconstrained aws_availability_zones data source - #7658
3.3.172026-09-10general: honour scope.provider for platform-downloaded custom po… - #7677

5.1.22026-10-05> [!IMPORTANT]
4.14.52026-10-05For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade note…
5.1.12026-09-20> [!IMPORTANT]
4.14.42026-09-14For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade note…
5.1.02026-08-27> [!IMPORTANT]

non signée La dernière release, 3.3.23, ne porte aucune signature que GitHub puisse vérifier.

Chargement du rapport de sécurité

non signée La dernière release, 5.1.2, ne porte aucune signature que GitHub puisse vérifier.

Chargement du rapport de sécurité