Skip to content
forked from Checkmarx/kics

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

License

Notifications You must be signed in to change notification settings

tspearconquest/kics

Folders and files

NameName
Last commit message
Last commit date
Apr 12, 2022
Apr 12, 2022
Apr 26, 2021
Mar 30, 2022
Mar 30, 2022
Feb 15, 2022
Mar 30, 2022
Sep 21, 2021
Apr 4, 2022
Mar 29, 2022
Apr 12, 2021
Oct 13, 2021
Jan 18, 2021
Feb 1, 2021
Dec 15, 2021
Sep 21, 2021
Aug 16, 2021
Aug 2, 2021
Aug 2, 2021
Mar 30, 2022
Apr 11, 2022
Sep 21, 2021
Apr 11, 2022
Mar 17, 2022
Mar 17, 2022
Mar 30, 2022
Jul 6, 2021
Feb 8, 2022
Mar 14, 2022
Oct 14, 2021
Aug 2, 2021
Apr 12, 2022
Apr 12, 2022
Jun 23, 2021
Feb 14, 2022
Oct 11, 2021

Repository files navigation

Latest Release License Queries Docker Pulls Documentation GitHub Discussions

checkmarx Codacy Badge Quality Gate Status Go Report Card Go Coverage

KICS - Keep Infrastructure as Code Secure


Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

KICS stands for Keeping Infrastructure as Code Secure, it is open source and is a must-have for any cloud native project.

Supported Platforms

Terraform    Kubernetes    Docker   

CloudFormation    Ansible    Helm   

OpenAPI    gRPC    Azure Resource Manager    Google Deployment Manager   

Cloud Deployment Kit    SAM   

Support of other solutions and additional cloud providers are on the roadmap.

Getting Started

Setting up and using KICS is super-easy.

Interested in more advanced stuff?

  • Deep dive into KICS queries.
  • Understand how to integrate KICS in your favourite CI/CD pipelines.

How it Works

What makes KICS really powerful and popular is its built-in extensibility. This extensibility is achieved by:

  • Fully customizable and adjustable heuristics rules, called queries. These can be easily edited, extended and added.
  • Robust but yet simple architecture, which allows quick addition of support for new Infrastructure as Code solutions.

Release process

KICS release process is quite simple. We have nightly builds that will pack and pre-release all changes merged into master. The nightly release will have a "nightly" prefix with the last commit hash code. We have binaries available for Windows, Linux and MacOS, as well as a Docker image in DockerHub

Contribution

KICS is a true community project. It's built as an open source from day one, and anyone can find his own way to contribute to the project. Check out how, within just minutes, you can start making a difference, by sharing your expertise with a community of thousands of security experts and software developers.

Note: For development not related to terraformer please use the Golang build tag dev in commands go run, go build and go test

Examples:

  • go test -tags dev ./...
  • go run -tags dev cmd/console/main.go
  • go build -tags dev cmd/console/main.go

Meet us at conferences

More

KICS public documentation has all the project aspects covered. Join the GitHub discussions or contact KICS core team at [email protected]

Keeping Infrastructure as Code Secure!


© 2021 Checkmarx Ltd. All Rights Reserved.

About

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

Resources

License

Code of conduct

Stars

Watchers

Forks

Packages

No packages published

Languages

  • Open Policy Agent 43.4%
  • HCL 27.1%
  • Go 24.1%
  • HTML 3.3%
  • Python 0.9%
  • Dockerfile 0.8%
  • Other 0.4%