Checkov vs OSV-Scanner: perbandingan

Checkov vs OSV-Scanner
Fakta	Checkov	OSV-Scanner
Bahasa	Python	Go
Lisensi	Apache-2.0	Apache-2.0
Bintang	9.1k	11k
Terbaru	3.3.23	v2.6.0
Push terakhir	2026-10-06	2026-10-05
Frekuensi rilis	sekitar 6 hari antar rilis	sekitar 35 hari antar rilis
Kontributor aktif	tidak dihitung	19 penulis commit di branch default dalam 90 hari terakhir
Peringatan	tidak ada	tidak ada

Hubungan keduanya

Keduanya menggantikan Snyk. Alternatif Snyk →
SebagianCheckovOnly the infrastructure as code checks, for Terraform, CloudFormation, Kubernetes and more.
SebagianOSV-ScannerDependency and container image scanning against OSV.dev, with guided remediation for npm and Maven.

3.3.232026-10-05sca: apply --skip-path regex and hidden-dir filtering to sca_package - #7712
3.3.212026-09-30terraform_json: handle HCL JSON array and single-dict block formats in parser - #7707
3.3.202026-09-27terraform_plan: skip resources being removed from state ('forget' action) - #7676
3.3.192026-09-17terraform: add CKV_AWS_394 for unconstrained aws_availability_zones data source - #7658
3.3.172026-09-10general: honour scope.provider for platform-downloaded custom po… - #7677

v2.6.02026-09-14Feature #2888 Publish multi-arch (linux/arm64) image for osv-scanner-action.
v2.5.12026-08-17Preserve package namespaces when querying osv.dev API (fixes #2978).
v2.5.02026-08-07Full OSV-Scalibr pipeline: Migrated scanning, filtering, and matching in osv-scanner to use osv-scalibr end-to-end, so…
v2.4.02026-06-18Feature #2815 Add support for the CycloneDX 1.7 specification (bumps cyclonedx-go to v0.11.0).
v2.3.82026-05-08Fix installation issues with go install due to dependency conflicts (downgrade containerd/cgroups/v3, moby/buildkit and…

tanpa tanda tangan Rilis terbaru, 3.3.23, tidak memiliki tanda tangan yang dapat diverifikasi GitHub.

Memuat laporan keamanan

✓ bertanda tangan Rilis terbaru, v2.6.0, memiliki tanda tangan yang diverifikasi GitHub.

Memuat laporan keamanan