---
id: bridgecrew
version: "3.2.511"
license: Apache License 2.0
license_treatment: permissive
maintenance: active
---

# bridgecrew — Infrastructure as code static analysis

License: permissive · Maintenance: active · Downloads: 97.2K/mo

## What it is and what it does

Bridgecrew is a deprecated wrapper around checkov that provides infrastructure-as-code static analysis through a command-line interface. It scans IaC files for security misconfigurations and compliance violations. The package is no longer maintained and was planned for archival at the end of 2023; the maintainers explicitly recommend using checkov directly instead.

Since bridgecrew is simply a CLI wrapper for checkov with no additional functionality, installing it adds a layer of indirection without benefit. The single runtime dependency is checkov itself, which you can invoke directly without the deprecated wrapper.

Use it for:

- Scan infrastructure-as-code files for security and compliance violations via a bridgecrew-branded CLI
- Analyze Terraform, CloudFormation, or other IaC configurations for misconfigurations
- Integrate IaC scanning into CI/CD pipelines using the bridgecrew command-line interface

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

Wraps checkov to provide infrastructure-as-code static analysis through a bridgecrew CLI interface.

No. This package is explicitly deprecated and no longer supported. The maintainers recommend using checkov directly instead. There is no functional advantage to installing bridgecrew over checkov, and doing so ties you to unmaintained code that may become incompatible with future checkov releases.

## Install

pip install bridgecrew
uv add bridgecrew
poetry add bridgecrew

## Installing bridgecrew

License in practice: Apache License 2.0 permits use, modification, and distribution with minimal restrictions, making it suitable for both commercial and open-source projects.

Quickstart:

pip install bridgecrew
from bridgecrew import cli
# Use checkov via bridgecrew CLI wrapper

This package is deprecated and no longer supported; use checkov directly instead.

Verify before relying:

- Whether the package remains functional given its deprecation status and planned archival end of 2023
- Current maintenance state and whether checkov dependency receives active updates

## Package facts

- License: Apache License 2.0 (permissive)
- Python support: unspecified
- Install friction: low
- Maintenance: active
- Downloads: 97.2K/month (top 15,000 on PyPI)
- Known vulnerabilities: none known

## Tags

infrastructure as code scanning, static analysis cli tool, checkov wrapper, iac security analysis, code compliance checking, deprecated, infrastructure-as-code

[View on SkillFed](https://skillfed.io/packages/bridgecrew) · [View on PyPI](https://pypi.org/project/bridgecrew/)