kics
kics copied to clipboard
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
I deepened KICS scan about terraform module. I understand now how it works about the `data.common_lib.providers` variables the `get_module_equivalent_key ` function, taken from the libraries. In the context of my...
Closes #5242 **Proposed Changes** - Change how KICS looks for `kics.config` - Docs was updated to fit with this new behavior. **_Some context_** This PR focus on changing setup for...
Hi, Recently I had a chance of investigating kics queries structure and metadata while fixing a few anomalies and descriptions for similar queries in different platforms. It made me realize...
Hi, Recently I had a chance of investigating kics queries structure and metadata while fixing a few anomalies and descriptions. It made me realize we might want to extend our...
### Platform *Terraform* ### Provider *AWS* ### Description *The "Resource Not Using Tags" query is returning a false-positive when tags are being set to a variable* Example #1 ``` Resource...
[Feat] Allow user to specify the directories to look for when performing IaC scanning for terraform
Hi, Have come across this open source solution recently that supports various vulnerability scans. 👍 **Problem Statement:** We make use of Gitlab for our CI/CD platform. Gitlab seems to be...
**Is your feature request related to a problem? Please describe.** I tested kics for Terraform code and it will also report problems it finds in the external modules I use...
AWS Access Key id and secret are displayed as plain text in the results report files. Identified keys and passwords should not display as plain text. Any possibility to mask...
Closes #5115, closes #5116, closes #5118 **Proposed Changes** - On issue 5115: Query was changed and files refactored. - On issue 5116: Query description was changed. - On issue 5118:...
**Proposed Changes** - fixed incorrect metadatas I submit this contribution under the Apache-2.0 license.