Project: KICS (Provisioning / Security & Compliance)
File: index.md

<div class="row" > <div class="col-6 text-center" > <div style="width: 100%; display: grid; place-items: center;"> <img alt="KICS - Keeping Infrastructure as Code Secure" src="img/logo/kicsnewlogo2022dark.png#only-light#gh-light-mode-only" width="500"> <img alt="KICS - Keeping Infrastructure as Code Secure" src="img/logo/kicsnewlogo2022white.png#only-dark#gh-dark-mode-only" width="500"> </div> <br/> <br/> <p>Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with <b>KICS</b> by Checkmarx.</p> <p><b>KICS</b> stands for <b>K</b>eeping <b>I</b>nfrastructure as <b>C</b>ode <b>S</b>ecure, it is open source and is a must-have for any cloud native project.</p> </div> <div class="col-6 text-center"> <br/><br/> <h4>Version 2.0.1</h4> <p style="font-size:8pt">2024.05.02<p> <a class="btn btn-outline-success" href="https://docs.kics.io/latest/CONTRIBUTING">Contribute!</a> </div> </div> Critical severity added a Terraformer removed Critical severity Parallel Scan (by default) Click to check the deprecated queries list. KICS scans and detects issues in following Infrastructure as Code solutions: <div style="display:flex;flex:1;flex-wrap:wrap;align-items:center;justify-content:center"> <div class="card card-interactable" style="min-width:150;flex:0 0 25%;display:flex;align-items:center;justify-content:center;margin:8px"> <a href="platforms/#terraform"> <img alt="Terraform" src="img/logo-terraform.png" width="150" style="min-width:150px">&nbsp;&nbsp;&nbsp; </a> </div> <div class="card card-interactable" style="min-width:150;flex:0 0 25%;display:flex;align-items:center;justify-content:center;margin:8px"> <a href="platforms/#kubernetes"> <img alt="Kubernetes" src="img/logo-k8s.png" width="150" style="min-width:150px">&nbsp;&nbsp;&nbsp; </a> </div> <div class="card card-interactable" style="min-width:150;flex:0 0 25%;display:flex;align-items:center;justify-content:center;margin:8px"> <a href="platforms/#docker"> <img alt="Docker" src="img/logo-docker.png" width="150" style="min-width:150px">&nbsp;&nbsp;&nbsp; </a> </div> <div class="card card-interactable" style="min-width:150;flex:0 0 25%;display:flex;align-items:center;justify-content:center;margin:8px"> <a href="platforms/#cloudformation"> <img alt="CloudFormation" src="img/logo-cf.png" width="150" style="min-width:150px">&nbsp;&nbsp;&nbsp; </a> </div> <div class="card card-interactable" style="min-width:150;flex:0 0 25%;display:flex;align-items:center;justify-content:center;margin:8px"> <a href="platforms/#ansible"> <img alt="Ansible" src="img/logo-ansible.png" width="150" style="min-width:150px">&nbsp;&nbsp;&nbsp; </a> </div> <div class="card card-interactable" style="min-width:150;flex:0 0 25%;display:flex;align-items:center;justify-content:center;margin:8px"> <a href="platforms/#openapi"> <img alt="OpenAPI" src="img/logo-openapi.png" width="150" style="min-width:150px">&nbsp;&nbsp;&nbsp; </a> </div> <div class="card card-interactable" style="min-width:150;flex:0 0 25%;display:flex;align-items:center;justify-content:center;margin:8px"> <a href="platforms/#helm"> <img alt="Helm" src="img/logo-helm.png" width="150" style="min-width:150px">&nbsp;&nbsp;&nbsp; </a> </div> <div class="card card-interactable" style="min-width:120;flex:0 0 25%;display:flex;align-items:center;justify-content:center;margin:8px"> <a href="platforms/#grpc"> <img alt="gRPC" src="img/logo-grpc.png" width="120" style="min-width:120px">&nbsp;&nbsp;&nbsp; </a> </div> <div class="card card-interactable" style="min-width:150;flex:0 0 25%;display:flex;align-items:center;justify-content:center;margin:8px"> <a href="platforms/#cdk"> <img alt="Cloud Deployment Kit" src="img/logo-cdk.png" width="150" style="min-width:150px">&nbsp;&nbsp;&nbsp; </a> </div> <div class="card card-interactable" style="min-width:80;flex:0 0 25%;display:flex;align-items:center;justify-content:center;margin:8px"> <a href="platforms/#crossplane"> <img alt="Crossplane" src="img/logo-crossplane.png" width="170" style="min-width:170px">&nbsp;&nbsp;&nbsp; </a> </div> <div class="card card-interactable" style="min-width:80;flex:0 0 25%;display:flex;align-items:center;justify-content:center;margin:8px"> <a href="platforms/#pulumi"> <img alt="Pulumi" src="img/logo-pulumi.png" width="170" style="min-width:170px">&nbsp;&nbsp;&nbsp; </a> </div> <div class="card card-interactable" style="min-width:80;flex:0 0 25%;display:flex;align-items:center;justify-content:center;margin:8px"> <a href="platforms/#serverlessfw"> <img alt="ServerlessFW" src="img/logo-serverlessfw.png" width="170" style="min-width:170px">&nbsp;&nbsp;&nbsp; </a> </div> <div class="card card-interactable" style="min-width:55;flex:0 0 25%;display:flex;align-items:center;justify-content:center;margin:8px"> <a href="platforms/#googledeploymentmanager"> <img alt="Google Deployment Manager" src="img/logo-gdm.png" width="55" style="min-width:55px">&nbsp;&nbsp;&nbsp; </a> </div> <div class="card card-interactable" style="min-width:55;flex:0 0 25%;display:flex;align-items:center;justify-content:center;margin:8px"> <a href="platforms/#azureresourcemanager"> <img alt="Azure Resource Manager" src="img/logo-arm.png" width="55" style="min-width:55px">&nbsp;&nbsp;&nbsp; </a> </div> <div class="card card-interactable" style="min-width:55;flex:0 0 25%;display:flex;align-items:center;justify-content:center;margin:8px"> <a href="platforms/#sam"> <img alt="SAM"

width="55" style="min-width:55px">&nbsp;&nbsp;&nbsp; </a> </div> <div class="card card-interactable" style="min-width:80;flex:0 0 25%;display:flex;align-items:center;justify-content:center;margin:8px"> <a href="platforms/#docker_compose"> <img alt="Docker Compose" src="img/logo-dockercompose.png" width="80" style="min-width:80px">&nbsp;&nbsp;&nbsp; </a> </div> <div class="card card-interactable" style="min-width:80;flex:0 0 25%;display:flex;align-items:center;justify-content:center;margin:8px"> <a href="platforms/#knative"> <img alt="Knative" src="img/logo-knative.png" width="80" style="min-width:80px">&nbsp;&nbsp;&nbsp; </a> </div> <div class="card card-interactable" style="min-width:80;flex:0 0 25%;display:flex;align-items:center;justify-content:center;margin:8px"> <a href="platforms/#azure_blueprints"> <img alt="Azure Blueprints" src="img/logo-azure-blueprints.png" width="80" style="min-width:80px">&nbsp;&nbsp;&nbsp; </a> </div> <div class="card card-interactable" style="min-width:80;flex:0 0 25%;display:flex;align-items:center;justify-content:center;margin:8px"> <a href="platforms/#cicd"> <img alt="GitHub Workflows" src="img/logo-github-icon.png" width="80" style="min-width:80px">&nbsp;&nbsp;&nbsp; </a> </div> <div class="card card-interactable" style="min-width:80;flex:0 0 25%;display:flex;align-items:center;justify-content:center;margin:8px"> <a href="platforms/#terraform"> <img alt="OpenTofu" src="img/logo-opentofu.png" width="130" style="min-width:80px">&nbsp;&nbsp;&nbsp; </a> </div> </div> <div style="display:flex;flex:1;flex-wrap:wrap;align-items:center;justify-content:center"> <div class="card" style="min-width:80;flex:0 0 25%;display:flex;align-items:center;justify-content:center;margin:8px"> <img alt="Databricks" src="img/logo-databricks.png" width="200">&nbsp;&nbsp;&nbsp; </div> <div class="card" style="min-width:80;flex:0 0 25%;display:flex;align-items:center;justify-content:center;margin:8px"> <img alt="NIFCloud" src="img/logo-nifcloud.png" width="70">&nbsp;&nbsp;&nbsp; </div> <div class="card" style="min-width:80;flex:0 0 25%;display:flex;align-items:center;justify-content:center;margin:8px"> <img alt="TencentCloud" src="img/logo-tencentcloud.png" width="120">&nbsp;&nbsp;&nbsp; </div> </div> In order to run the Databricks, NIFCloud and TencentCloud queries, use the `--experimental-queries` flag when running KICS. Setting up and using KICS is super-easy. First, see how to . Then explore KICS and quickly fix the issues detected. Interested in more advanced stuff? Deep dive into KICS . Understand how you to KICS in your favorite CI/CD pipelines. What makes KICS really powerful and popular is its built-in extensibility. This extensibility is achieved by: Fully customizable and adjustable heuristics rules, called . These can be easily edited, extended and added. Robust but yet simple , which allows quick addition of support for new Infrastructure as Code solutions. KICS is a true community project. It's built as an open source project from day one and anyone can find his own way to contribute to the project. , within just minutes, you can start making a difference, by sharing your expertise with a community of thousands of security experts and software developers. <a href="https://github.com/Checkmarx/kics/" target="_blank">Take me to the repo on GitHub!</a> The KICS project is powered by <a href="https://www.checkmarx.com/" target="_blank">Checkmarx</a>, global leader of Application Security Testing. about Infrastructure as Code, Infrastructure as Code Testing and Checkmarx. KICS will always stay an open source and free project for the benefit of global software industry community. We believe that when Software is Everywhere, Security is Everything. Now, Software <span style="color: #5FBB46">=</span> Security. Looking for more info? Explore KICS project in details: <a href="https://github.com/Checkmarx/kics/projects" target="_blank">Project plans</a> <a href="https://github.com/Checkmarx/kics/issues" target="_blank">Issues</a> Join the <a href="https://github.com/Checkmarx/kics/discussions" target="_blank">GitHub discussions</a>. Or contact KICS core team at