> ## Documentation Index
> Fetch the complete documentation index at: https://docs.envzero.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Using the Checkov plugin

> Integrate the Checkov plugin with env zero to run IaC security scanning during deployments, requiring a target directory and optional CLI flags as inputs.

## Overview

This plugin executes the `checkov` CLI and integrates Infrastructure-as-Code security best practices within your env zero deployments.

The plugin will install the `checkov` binary and execute it.

For more information, check out the [Checkov Plugin git repository](https://github.com/env0/env0-checkov-plugin).

For an example repository that integrates the Checkov plugin, click [here](https://github.com/env0/templates/blob/master/plugins/checkov/env0.yml).

## Inputs

To use the Checkov plugin, [add it to your custom flow](https://docs.envzero.com/guides/integrations/plugins.md) and pass the following inputs:

1. `directory` (**Required**) - the path to the directory with the IaC code to scan (the root folder is your project's root folder)\
   flags - a string containing additional flags as one string
2. `flags` - a string containing additional flags as one string

## Further reading

* [What is Checkov: benefits, key features, and examples](https://www.envzero.com/blog/best-iac-scan-tool-what-is-checkov)
* [Top infrastructure as code security tools](https://www.envzero.com/blog/top-infrastructure-as-code-security-tools)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.