cannot install KICS older then V1.5.1 using the tag on linux machine

[daviduash]

the URL for the download file has changed since V1.5.2 and the installation script does not support it

curl -sfL 'https://raw.githubusercontent.com/Checkmarx/kics/master/install.sh' | bash -s -- -b /usr/local/bin v1.5.1 ==> WORKS curl -sfL 'https://raw.githubusercontent.com/Checkmarx/kics/master/install.sh' | bash -s -- -b /usr/local/bin v1.5.2 ==> FAILES

[rafaela-soares]

Hello, @daviduash 🙂 Thank you so much for reaching us!

KICS deprecated the availability of binaries in the GitHub releases assets as of version 1.5.2. The latest (and last) binary available is 1.5.1: https://github.com/Checkmarx/kics/releases/tag/v1.5.1

However, KICS is available as a Docker image. You can see the documentation here.

Let me know if you need any help 😊

[todd-hough]

At my company the desktop security configuration prevents using bind mounts with Docker. This makes it very inconvenient to use Kics in Docker form. Please reconsider supporting standalone binaries again.

[rafaela-soares]

Hi @daviduash and @todd-hough,

This issue will be closed. The file install.sh will be probably removed in the next KICS release (1.6.4) since KICS deprecated the availability of binaries. However, we documented how to build KICS from the source code (PR #5982).

cd kics
go mod vendor
LINUX/MAC: go build -o ./bin/kics cmd/console/main.go
WINDOWS: go build -o ./bin/kics.exe cmd/console/main.go (make sure to create the bin folder)