> ## Documentation Index
> Fetch the complete documentation index at: https://docs.envzero.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Using the Checkov plugin

> Integrate the Checkov plugin with env zero to run IaC security scanning during deployments, requiring a target directory and optional CLI flags as inputs.

## Overview

This plugin executes the `checkov` CLI and integrates Infrastructure-as-Code security best practices within your env zero deployments.

The plugin will install the `checkov` binary and execute it.

For more information, check out the [Checkov Plugin git repository](https://github.com/env0/env0-checkov-plugin).

For an example repository that integrates the Checkov plugin, click [here](https://github.com/env0/templates/blob/master/plugins/checkov/env0.yml).

## Inputs

To use the Checkov plugin, you need to pass the following inputs:

1. `directory` (**Required**) - the path to the directory with the IaC code to scan (the root folder is your project's root folder)\
   flags - a string containing additional flags as one string
2. `flags` - a string containing additional flags as one string

## Next steps

* [Using the TFsec plugin](/guides/integrations/plugins/tfsec-plugin) - Scan Terraform code for security misconfigurations.
* [Using the Trivy plugin](/guides/integrations/plugins/trivy-plugin) - Run Trivy config scans on your IaC directory.
* [Using the OPA plugin](/guides/integrations/plugins/opa-plugin) - Enforce policies with Open Policy Agent.
* [Manage policies](/guides/policies-governance/policies) - Define and apply governance policies across environments.