diff --git a/pkgs/development/tools/analysis/checkov/flake8-compat-5.x.patch b/pkgs/by-name/ch/checkov/flake8-compat-5.x.patch
similarity index 100%
rename from pkgs/development/tools/analysis/checkov/flake8-compat-5.x.patch
rename to pkgs/by-name/ch/checkov/flake8-compat-5.x.patch
diff --git a/pkgs/development/tools/analysis/checkov/default.nix b/pkgs/by-name/ch/checkov/package.nix
similarity index 83%
rename from pkgs/development/tools/analysis/checkov/default.nix
rename to pkgs/by-name/ch/checkov/package.nix
index f25ce7248c60..905fd2bfa585 100644
--- a/pkgs/development/tools/analysis/checkov/default.nix
+++ b/pkgs/by-name/ch/checkov/package.nix
@@ -4,20 +4,37 @@
   python3,
 }:
 
+let
+  py = python3.override {
+    packageOverrides = self: super: {
+
+      # Requires 'cyclonedx-python-lib = ">=6.0.0,<8.0.0"'
+      cyclonedx-python-lib = super.cyclonedx-python-lib.overridePythonAttrs (oldAttrs: rec {
+        version = "7.6.2";
+        src = fetchFromGitHub {
+          owner = "CycloneDX";
+          repo = "cyclonedx-python-lib";
+          tag = "v${version}";
+          hash = "sha256-nklizCiu7Nmynjd5WU5oX/v2TWy9xFVF4GkmCwFKZLI=";
+        };
+      });
+    };
+  };
+in
+with py.pkgs;
+
 python3.pkgs.buildPythonApplication rec {
   pname = "checkov";
-  version = "3.2.364";
+  version = "3.2.370";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "bridgecrewio";
     repo = "checkov";
     tag = version;
-    hash = "sha256-ZmvIICAnC9RDizKl06aOD1LNEAo8WG7E1ZZB3Rero+c=";
+    hash = "sha256-IaE2Mg8Fk1Xb3ujPRHTY1N4ev75qM8Kj5o7IPtKuNsk=";
   };
 
-  patches = [ ./flake8-compat-5.x.patch ];
-
   pythonRelaxDeps = [
     "bc-detect-secrets"
     "bc-python-hcl2"
@@ -45,9 +62,9 @@ python3.pkgs.buildPythonApplication rec {
     "pycep-parser"
   ];
 
-  build-system = with python3.pkgs; [ setuptools-scm ];
+  build-system = with py.pkgs; [ setuptools-scm ];
 
-  dependencies = with python3.pkgs; [
+  dependencies = with py.pkgs; [
     aiodns
     aiohttp
     aiomultiprocess
@@ -90,7 +107,7 @@ python3.pkgs.buildPythonApplication rec {
     update-checker
   ];
 
-  nativeCheckInputs = with python3.pkgs; [
+  nativeCheckInputs = with py.pkgs; [
     aioresponses
     distutils
     mock
diff --git a/pkgs/by-name/pi/pip-audit/package.nix b/pkgs/by-name/pi/pip-audit/package.nix
index 0e55d55e9142..6522775d1e4e 100644
--- a/pkgs/by-name/pi/pip-audit/package.nix
+++ b/pkgs/by-name/pi/pip-audit/package.nix
@@ -7,7 +7,7 @@
 python3.pkgs.buildPythonApplication rec {
   pname = "pip-audit";
   version = "2.7.3";
-  format = "pyproject";
+  pyproject = true;
 
   src = fetchFromGitHub {
     owner = "trailofbits";
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index d1fad5c7dcd1..fb3618d837a1 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -287,8 +287,6 @@ with pkgs;
 
   chef-cli = callPackage ../tools/misc/chef-cli { };
 
-  checkov = callPackage ../development/tools/analysis/checkov { };
-
   clang-uml = callPackage ../by-name/cl/clang-uml/package.nix {
     stdenv = clangStdenv;
   };