kics
kics copied to clipboard
Bad performance when using --queries-path flag in docker
Expected Behavior
When the flag --queries-path is not defined, kics will use the default queries folder.
Kics performance when running a scan with --queries-path pointing to the kics default queries folder must (or maybe) have a similar duration.
Actual Behavior
When running kics using -q flag, even the -q target is the default queries folder, kics will spend much more time to perform a scan when comparing to the same call but without -q.
Steps to Reproduce the Problem
Suppose that I have the kics project in C:\kics - by this way, the default queries folder will be C:\kics\assets\queries - and I also have a dockerfile sample in c:\positive.dockerfile:
Run: docker run -v "c:/:/path" checkmarx/kics:latest scan --path /path/positive.dockerfile
- It will perform the scan in less than 10s
Run: docker run -v "c:/:/path" checkmarx/kics:latest scan --path /path/positive.dockerfile -q /path/assets/queries
- it will perform the scan in 80s or more.
Specifications
- Version: 1.5.3
- Platform: Docker
- Subsystem: N/A