kics
kics copied to clipboard
Checkmarx
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
I'm looking at these two docs - https://docs.kics.io/latest/configuration-file/ - https://docs.kics.io/latest/results/ And trying to setup a _kics.config_ file to output in multiple formats, but the reports are not being created. ###...
### Expected Behavior it runs ### Actual Behavior it hangs for more than 10 mins, no error messages ### Steps to Reproduce the Problem Run the following commands in CodeBuild:...
It seam that `queries/terraform/aws/config_rule_for_encrypted_volumes_is_disabled` is triggering false positive and I don't understand the query.
Hi, I tried to run KICS install using One-liner Install Script using Curl command: `sudo curl -sfL 'https://raw.githubusercontent.com/Checkmarx/kics/master/install.sh' | bash -s -- -b /usr/local/bin ` I tried with debugging mode...
**Is your feature request related to a problem? Please describe.** I'm using Terraform with a custom module registry and want to detect vulnerabilities introduced by Terraform modules. Scanning Terraform modules...
Go to [Terraform - KICS](https://docs.kics.io/latest/queries/terraform-queries/) In the initial lines you see the GCP header. In the subsequent tables, there are no headers. Actually they are there, but as part of...
**Is your feature request related to a problem? Please describe.** I'd like to kick off a KICS scan in a node lambda environment within AWS **Describe the solution you'd like**...
### Expected Behavior When the flag `--queries-path` is not defined, kics will use the default queries folder. Kics performance when running a scan with `--queries-path` pointing to the kics default...
### Expected Behavior When running "`kics scan -p sample.zip -o output`" using (or not) the **flag -t**, kics must run the queries and create, if the scan is valid, a...
### Expected Behavior (Which results are expected from KICS?) No medium vulnerable detected ### Actual Behavior (Formatted logs and samples helps us to better understand the issue) ``` CloudWatch Without...
