kics

kics copied to clipboard

Terraform SAST Scanner tells me: "API Gateway Deployment should have access log setting defined when connected to an API Gateway Stage." but I don't see a way to add access logs to this resource

1

Apologies if I'm missing something here, but I've reviewed the [documentation at Terraform's site](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/api_gateway_deployment) and it seems to me that it's not possible to add access logging to an aws_api_gateway_deployment...

adamkendall1

**Automated Changes** Updating docker images digests Triggered by SHA: _34973e9dbabce8dfe65aa2287431ce6be9808222_

kicsbot

Add support for variables inbase image name

4

### Context Because we want to analyse some multistage docker builds or just use variables in the process, we'd like kics to analyse correctly our variables. ### Expected Behavior (Which...

LvffY

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.70 to 1.44.76. Release notes Sourced from github.com/aws/aws-sdk-go's releases. Release v1.44.76 (2022-08-12) Service Client Updates service/amp: Updates service API and documentation service/chime-sdk-messaging: Updates service API, documentation, and...

dependabot[bot]

Ansible include causes kics to ignore it's ignore patterns

8

### Description I have include statements in my ansible-playbooks. In one of my tasks of the top-playbook, there is a `create_password` parameter which triggers the generic password rule. I wanted...

sluetze

Closes #5605 **Proposed Changes** - added parentheses expr to convertStringPart I submit this contribution under the Apache-2.0 license.

rafaela-soares

**Proposed Changes** - initial CloudFormation Security Queries Refactoring to support CF templates inside serverless.yml files - fix e2e changes I submit this contribution under the Apache-2.0 license.

cxMiguelSilva

Closes #5621 **Proposed Changes** - added resolver for args I submit this contribution under the Apache-2.0 license.

rafaela-soares

**Proposed Changes** - Add 1 Knative Security Query - Add Type Kubernetes when detected Knative file in analyzer.go - Refactor and add some samples to k8s Pod Queries I submit...

cxMiguelSilva

Kics panics when parsing a dynamic key enclosed within parentheses

1

When a key containing variables is enclosed within parentheses inside the `terraform` file, kics panics with an error `panic: value is unknown`. **sample file content:** ``` ~/kics-sample > cat test.tf...

VishwaBhat