README
¶
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
KICS stands for Keeping Infrastructure as Code Secure, it is open source and is a must-have for any cloud native project.
Supported Platforms
Beta Features
In order to run the Databricks, NIFCloud and TencentCloud queries, use the --experimental-queries flag when running KICS.
Getting Started
Setting up and using KICS is super-easy.
- First, see how to install and get KICS running.
- Then explore KICS output results format and quickly fix the issues detected.
Interested in more advanced stuff?
See KICS documentation for more details and topics.
How it Works
What makes KICS really powerful and popular is its built-in extensibility. This extensibility is achieved by:
- Fully customizable and adjustable heuristics rules, called queries. These can be easily edited, extended and added.
- Robust but yet simple architecture, which allows quick addition of support for new Infrastructure as Code solutions.
Community
You're welcome to join our community, talk with us on GitHub discussions or contact KICS core team at kics@checkmarx.com.
KICS Contributors
See our individual contributors in the community page. You're welcome to join them by contributing to KICS.
We also like to thank the following organizations for their ongoing contribution:
- Checkmarx
- Bedrock Streaming (since v1.4.8)
- Dynatrace (since v1.5.1)
- Orca Security (since v1.5.10)
KICS Users
KICS is used by various companies and organizations, some are listed below. If you would like to be included here please open a PR.
- Checkmarx (IaC Security)
- GitLab (Infrastructure as Code scanning)
- Bedrock Streaming
- Cisco (CI/CD Securitry)
- Orca Security
- JIT (SAST for IaC)
- Firefly
- Redpanda
- Keptn / Keptn Lifecycle Toolkit
Keeping Infrastructure as Code Secure!
© 2024 Checkmarx Ltd. All Rights Reserved.
Directories
¶
| Path | Synopsis |
|---|---|
|
cmd
|
|
|
e2e
|
|
|
testcases
Package testcases provides end-to-end (E2E) testing functionality for the application.
|
Package testcases provides end-to-end (E2E) testing functionality for the application. |
|
internal
|
|
|
pkg
|
|
|
engine/mock
Package mock is a generated GoMock package.
|
Package mock is a generated GoMock package. |
|
engine/source
Package source (go:generate go run -mod=mod github.com/golang/mock/mockgen -package mock -source=./$GOFILE -destination=../mock/$GOFILE)
|
Package source (go:generate go run -mod=mod github.com/golang/mock/mockgen -package mock -source=./$GOFILE -destination=../mock/$GOFILE) |
|
kuberneter
Package kuberneter implements calls to the Kubernetes API in order to scan the runtime information of the resources
|
Package kuberneter implements calls to the Kubernetes API in order to scan the runtime information of the resources |
|
model
Package model (go:generate go run -mod=mod github.com/mailru/easyjson/easyjson ./$GOFILE)
|
Package model (go:generate go run -mod=mod github.com/mailru/easyjson/easyjson ./$GOFILE) |
|
scan
Package scan implements functions and helpers to ensure the proper scan of the specified files
|
Package scan implements functions and helpers to ensure the proper scan of the specified files |
|
utils
Package utils contains various utility functions to use in other packages
|
Package utils contains various utility functions to use in other packages |