bridgecrew

Infrastructure as code static analysis

bridgecrew v3.2.511 97.2K downloads/30d#13,162 on PyPI

Permissive license Apache License 2.0 Active released 2026-03-26

What it is and what it does

Bridgecrew is a deprecated wrapper around checkov that provides infrastructure-as-code static analysis through a command-line interface. It scans IaC files for security misconfigurations and compliance violations. The package is no longer maintained and was planned for archival at the end of 2023; the maintainers explicitly recommend using checkov directly instead.

Since bridgecrew is simply a CLI wrapper for checkov with no additional functionality, installing it adds a layer of indirection without benefit. The single runtime dependency is checkov itself, which you can invoke directly without the deprecated wrapper.

Use it for:

Scan infrastructure-as-code files for security and compliance violations via a bridgecrew-branded CLI
Analyze Terraform, CloudFormation, or other IaC configurations for misconfigurations
Integrate IaC scanning into CI/CD pipelines using the bridgecrew command-line interface

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

Wraps checkov to provide infrastructure-as-code static analysis through a bridgecrew CLI interface.

No. This package is explicitly deprecated and no longer supported. The maintainers recommend using checkov directly instead. There is no functional advantage to installing bridgecrew over checkov, and doing so ties you to unmaintained code that may become incompatible with future checkov releases.

Install

bridgecrew on PyPI

pip

pip install bridgecrew

uv

uv add bridgecrew

poetry

poetry add bridgecrew

Installing bridgecrew

License in practice

Apache License 2.0 permits use, modification, and distribution with minimal restrictions, making it suitable for both commercial and open-source projects.

Quickstart

pip install bridgecrew
from bridgecrew import cli
# Use checkov via bridgecrew CLI wrapper

This package is deprecated and no longer supported; use checkov directly instead.

Verify before relying

Whether the package remains functional given its deprecation status and planned archival end of 2023
Current maintenance state and whether checkov dependency receives active updates

Package facts

License	Apache License 2.0 (permissive)
Python support	not specified
Install friction	low — pure-Python wheel
Runtime dependencies	1 — checkov
Maintenance	actively maintained — 141 days since the last release
First released	2020-04-27
Downloads	97,232/month — #13,162 on PyPI (30-day window, as of 2026-08-14)
Known vulnerabilities	none known (OSV.dev, checked 2026-08-14)

Evidence: bridgecrew-3.2.511-py3-none-any.whl

Environment :: ConsoleIntended Audience :: DevelopersIntended Audience :: System AdministratorsLicense :: OSI Approved :: Apache Software LicenseProgramming Language :: Python :: 3 :: OnlyProgramming Language :: Python :: 3.10Programming Language :: Python :: 3.11Programming Language :: Python :: 3.7Programming Language :: Python :: 3.8Programming Language :: Python :: 3.9Topic :: SecurityTopic :: Software Development :: Build Tools