Update gh actions

Author: dojci

.github/workflows/main.yml

@@ -71,6 +71,11 @@ jobs:
         run: |
           pip install detect-secrets
 
+      - shell: bash
+        name: "INSTALL: checkov"
+        run: |
+          pip install checkov
+
       - shell: bash
         name: "INSTALL: tflint"
         if: steps.cache-tflint.outputs.cache-hit != 'true'