Checkov vs OSV-Scanner : comparatif

Checkov vs OSV-Scanner
Fait	Checkov	OSV-Scanner
Langage	Python	Go
Licence	Apache-2.0	Apache-2.0
Étoiles	9.1k	11k
Dernière release	3.3.23	v2.6.0
Dernier push	2026-10-06	2026-10-05
Rythme des releases	environ 6 jours entre les releases	environ 35 jours entre les releases
Contributeurs actifs	non compté	19 auteurs de commits sur la branche par défaut ces 90 derniers jours
Signalements	aucun	aucun

Ce qui les relie

Les deux remplacent Snyk. Alternatives à Snyk →
PartielCheckovOnly the infrastructure as code checks, for Terraform, CloudFormation, Kubernetes and more.
PartielOSV-ScannerDependency and container image scanning against OSV.dev, with guided remediation for npm and Maven.

3.3.232026-10-05sca: apply --skip-path regex and hidden-dir filtering to sca_package - #7712
3.3.212026-09-30terraform_json: handle HCL JSON array and single-dict block formats in parser - #7707
3.3.202026-09-27terraform_plan: skip resources being removed from state ('forget' action) - #7676
3.3.192026-09-17terraform: add CKV_AWS_394 for unconstrained aws_availability_zones data source - #7658
3.3.172026-09-10general: honour scope.provider for platform-downloaded custom po… - #7677

v2.6.02026-09-14Feature #2888 Publish multi-arch (linux/arm64) image for osv-scanner-action.
v2.5.12026-08-17Preserve package namespaces when querying osv.dev API (fixes #2978).
v2.5.02026-08-07Full OSV-Scalibr pipeline: Migrated scanning, filtering, and matching in osv-scanner to use osv-scalibr end-to-end, so…
v2.4.02026-06-18Feature #2815 Add support for the CycloneDX 1.7 specification (bumps cyclonedx-go to v0.11.0).
v2.3.82026-05-08Fix installation issues with go install due to dependency conflicts (downgrade containerd/cgroups/v3, moby/buildkit and…

non signée La dernière release, 3.3.23, ne porte aucune signature que GitHub puisse vérifier.

Chargement du rapport de sécurité

✓ signée La dernière release, v2.6.0, porte une signature vérifiée par GitHub.

Chargement du rapport de sécurité