> ## Documentation Index
> Fetch the complete documentation index at: https://docs.envzero.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Using the Checkov Plugin

> Integrate the Checkov plugin with env zero to run IaC security scanning during deployments, requiring a target directory and optional CLI flags as inputs.

## Overview

This plugin executes the `checkov` CLI and integrates Infrastructure-as-Code security best practices within your env zero deployments.

The plugin will install the `checkov` binary and execute it.

For more information, check out the [Checkov Plugin git repository](https://github.com/env0/env0-checkov-plugin).

For an example repository that integrates the Checkov plugin, click [here](https://github.com/env0/templates/blob/master/plugins/checkov/env0.yml).

## Inputs

To use the Checkov plugin, you need to pass the following inputs:

1. `directory` (**Required**) - the path to the directory with the IaC code to scan (the root folder is your project's root folder)\
   flags - a string containing additional flags as one string
2. `flags` - a string containing additional flags as one string

## Suggested Blog Content

[What is tfsec: Benefits, Key Features, and Examples](https://www.env0.com/blog/best-iac-scan-tool-what-is-tfsec)

[What is Checkov: Benefits, Key Features, and Examples](https://www.env0.com/blog/best-iac-scan-tool-what-is-checkov)

[What is Terrascan: Benefits, Key Features, and Examples](https://www.env0.com/blog/best-iac-scan-tools-what-is-terrascan)

[Best IaC Scanning Tools](https://www.env0.com/blog/best-iac-scan-tool)

## Next steps

* [Using the TFsec Plugin](/guides/integrations/plugins/tfsec-plugin) - Scan Terraform code for security misconfigurations.
* [Using the Trivy Plugin](/guides/integrations/plugins/trivy-plugin) - Run Trivy config scans on your IaC directory.
* [Using the OPA Plugin](/guides/integrations/plugins/opa-plugin) - Enforce policies with Open Policy Agent.
* [Manage Policies](/guides/policies-governance/policies) - Define and apply governance policies across environments.