The image is for running checkov, checkov is installed in /app/ in case you need to customize the install before usage.
checkov: stage: linting image: registry.gitlab.com/pipeline-components/checkov:latest script: - checkov -d .