diff --git a/setup/brew-packages-desktop.txt b/setup/brew-packages-desktop.txt
index 0dbd2b40..e7ddfac7 100644
--- a/setup/brew-packages-desktop.txt
+++ b/setup/brew-packages-desktop.txt
@@ -54,6 +54,7 @@ bazelisk  # bazel wrapper downloader like mvnw/gradlew, addes 'bazel' to $PATH s
 brew-cask-completion
 cfssl
 #cfn-lint
+checkov
 checkstyle
 circleci
 cmatrix