diff --git a/flux/cluster/apps/monitoring/kustomization.yaml b/flux/cluster/apps/monitoring/kustomization.yaml
index c5206e7..98bb16b 100644
--- a/flux/cluster/apps/monitoring/kustomization.yaml
+++ b/flux/cluster/apps/monitoring/kustomization.yaml
@@ -3,3 +3,4 @@ kind: Kustomization
 resources:
   - vpa
   - goldilocks
+  - polaris
diff --git a/flux/cluster/apps/monitoring/polaris/helm-release.yaml b/flux/cluster/apps/monitoring/polaris/helm-release.yaml
new file mode 100644
index 0000000..3bc2b49
--- /dev/null
+++ b/flux/cluster/apps/monitoring/polaris/helm-release.yaml
@@ -0,0 +1,21 @@
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: polaris
+  namespace: monitoring
+spec:
+  interval: 5m
+  chart:
+    spec:
+      chart: polaris
+      version: 5.1.0
+      sourceRef:
+        kind: HelmRepository
+        name: fairwinds-charts
+        namespace: flux-system
+      interval: 5m
+  timeout: 20m
+  values:
+    dashboard:
+      replicas: 1
+      enable: true
diff --git a/flux/cluster/apps/monitoring/polaris/kustomization.yaml b/flux/cluster/apps/monitoring/polaris/kustomization.yaml
new file mode 100644
index 0000000..34a8531
--- /dev/null
+++ b/flux/cluster/apps/monitoring/polaris/kustomization.yaml
@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - helm-release.yaml
diff --git a/nixos/hosts/bastion/configuration.nix b/nixos/hosts/bastion/configuration.nix
index ee7cb34..0042a4c 100644
--- a/nixos/hosts/bastion/configuration.nix
+++ b/nixos/hosts/bastion/configuration.nix
@@ -37,6 +37,7 @@ in {
   # Additional packages
   environment.systemPackages = with pkgs; [
     binutils
+    checkov
     fix-vscode
     fluxcd
     k9s