kics icon indicating copy to clipboard operation
kics copied to clipboard

Bad performance when using --queries-path flag in docker

Open cxlucas opened this issue 3 years ago • 0 comments

Expected Behavior

When the flag --queries-path is not defined, kics will use the default queries folder. Kics performance when running a scan with --queries-path pointing to the kics default queries folder must (or maybe) have a similar duration.

Actual Behavior

When running kics using -q flag, even the -q target is the default queries folder, kics will spend much more time to perform a scan when comparing to the same call but without -q.

Steps to Reproduce the Problem

Suppose that I have the kics project in C:\kics - by this way, the default queries folder will be C:\kics\assets\queries - and I also have a dockerfile sample in c:\positive.dockerfile:

Run: docker run -v "c:/:/path" checkmarx/kics:latest scan --path /path/positive.dockerfile

  • It will perform the scan in less than 10s

Run: docker run -v "c:/:/path" checkmarx/kics:latest scan --path /path/positive.dockerfile -q /path/assets/queries

  • it will perform the scan in 80s or more.

Specifications

  • Version: 1.5.3
  • Platform: Docker
  • Subsystem: N/A

cxlucas avatar Mar 08 '22 18:03 cxlucas