kics
kics copied to clipboard
Checkmarx
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
As a user, I want to find IaC vulnerabilities on Puppet. Puppet is based Ruby programming language. Here official documentation link: https://puppet.com/docs/puppet/6/puppet_overview.html
10:25AM | DEBUG | Could not find string flag ci 10:25AM | DEBUG | console.scan() 10:25AM | INFO | Scanning with Keeping Infrastructure as Code Secure 1.4.5 10:25AM | DEBUG...
https://docs.kics.io has versioned documentation (1.2.3, 1.2.4...). 1. It should be for major.minor (e.g. 1.1, 1.2) as the maintenance releases should be only bug fixes / small issues. 2. At the...
### Expected Behavior KICS should point to correct index when there is nested arrays ### Actual Behavior KICS is not executing correctly when there is nested arrays, as you can...
**Is your feature request related to a problem? Please describe.** The Kics docker image is provided on dockerhub. However, dockerhub introduces rate limiting, and quite often, pulls will fail in...
There are a few cases related to defined variables that Password and Secrets return FP's: - **Code snippets**: ``` Resources: MyLambdaFunction: Type: AWS::Lambda::Function Properties: FunctionName: !Sub '${AWS::StackName}-CdnViewerRequest' Code: ZipFile: !Sub...
### Expected Behavior CLI syntax error thrown ### Actual Behavior Creates output folder with name "utput-path" ### Steps to Reproduce the Problem 1. Run command kics scan -output-path ./../ --path...
### Description As an user, I want to find IaC vulnerabilities on Vagrantfile's. Vagrantfile is based on Ruby programming language. Here official documentation link: https://www.vagrantup.com/docs/vagrantfile Some examples: https://github.com/adlawson/vagrantfiles https://github.com/patrickdlee/vagrant-examples
In README at "Supported Platforms" there is logo of docker, and searching in repo for docker return results, but not for podman. podman is alternative to docker: https://podman.io/ https://github.com/containers/podman podman-compose:...
