Awesome
<a href="https://www.kics.io" title="www.kics.io"><img src="docs/img/button_www-kics-io.png" align="right"></a>
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
KICS stands for Keeping Infrastructure as Code Secure, it is open source and is a must-have for any cloud native project.
Supported Platforms
<br> <table align="center"><tr> <td> <a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#terraform"> <picture> <source media="(prefers-color-scheme: light)" srcset="docs/img/logo-terraform.png" alt="Terraform" width="120" /> <source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-terraform-dark.png" alt="Terraform" width="120" /> <img src="docs/img/logo-terraform.png" alt="Terraform" width="120" /> </picture> </a> </td> <td> <a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#kubernetes"> <picture> <source media="(prefers-color-scheme: light)" srcset="docs/img/logo-k8s.png" width="160"> <source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-k8s-dark.png" width="160"> <img alt="Kubernetes" src="docs/img/logo-k8s.png" width="160"> </picture> </a> </td> <td> <a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#docker"> <img alt="Docker" src="docs/img/logo-docker.png" width="180"> </a> </td> </tr></table> <table align="center"><tr> <td> <a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#cloudformation"> <picture> <source media="(prefers-color-scheme: light)" srcset="docs/img/logo-cf.png" width="150"> <source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-cf-dark.png" width="150"> <img alt="CloudFormation" src="docs/img/logo-cf.png" width="150"> </picture> </a> </td> <td> <a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#ansible"> <picture> <source media="(prefers-color-scheme: light)" srcset="docs/img/logo-ansible.png" width="150"> <source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-ansible-dark.png" width="150"> <img alt="Ansible" src="docs/img/logo-ansible.png" width="150"> </picture> </a> </td> <td> <a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#helm"> <picture> <source media="(prefers-color-scheme: light)" srcset="docs/img/logo-helm-alt.png" width="60"> <source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-helm-dark.png" width="60"> <img alt="Helm" src="docs/img/logo-helm-alt" width="60"> </picture> </a> </td> </tr></table> <table align="center"><tr> <td> <a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#openapi"> <picture> <source media="(prefers-color-scheme: light)" srcset="docs/img/logo-openapi.png" width="185"> <source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-openapi-dark.png" width="185"> <img alt="OpenAPI" src="docs/img/logo-openapi.png" width="185"> </picture> </a> </td> <td> <a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#grpc"> <picture> <source media="(prefers-color-scheme: light)" srcset="docs/img/logo-grpc.png" width="135"> <source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-grpc-dark.png" width="135"> <img alt="gRPC" src="docs/img/logo-grpc.png" width="135"> </picture> </a> </td> <td> <a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#azure-resource-manager"> <img alt="Azure Resource Manager" src="docs/img/logo-arm.png" width="65" </a> </td> <td> <a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#google-deployment-manager"> <img alt="Google Deployment Manager" src="docs/img/logo-gdm.png" width="65"> </a> </td> </tr></table> <table align="center"><tr> <td> <a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#cdk"> <picture> <source media="(prefers-color-scheme: light)" srcset="docs/img/logo-cdk.png" width="175"> <source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-cdk-dark.png" width="175"> <img alt="Cloud Development Kit" src="docs/img/logo-cdk.png" width="175"> </picture> </a> </td> <td> <a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#sam"> <img alt="SAM" src="docs/img/logo-sam.png" width="65"> </a> </td> <td> <a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#docker-compose"> <img alt="Docker Compose" src="docs/img/logo-dockercompose.png" width="95"> </a> </td> <td> <a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#knative"> <img alt="Knative" src="docs/img/logo-knative.png" width="85"> </a> </td> </tr></table> <table align="center"><tr> <td> <a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#crossplane"> <picture> <source media="(prefers-color-scheme: light)" srcset="docs/img/logo-crossplane.png" width="165"> <source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-crossplane-dark.png" width="165"> <img alt="Crossplane" src="docs/img/logo-crossplane.png" width="165"> </picture> </a> </td> <td> <a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#pulumi"> <picture> <source media="(prefers-color-scheme: light)" srcset="docs/img/logo-pulumi.png" width="145"> <source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-pulumi-dark.png" width="145"> <img alt="Pulumi" src="docs/img/logo-pulumi.png" width="145"> </picture> </a> </td> <td> <a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#serverlessfw"> <picture> <source media="(prefers-color-scheme: light)" srcset="docs/img/logo-serverlessfw.png" width="170"> <source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-serverlessfw-dark.png" width="170"> <img alt="ServerlessFW" src="docs/img/logo-serverlessfw.png" width="170"> </picture> </a> </td> </tr></table> <table align="center"><tr> <td> <a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#azure-blueprints"> <img alt="Azure BluePrints" src="docs/img/logo-azure-blueprints.png" width="85"> </a> </td> <td> <a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#cicd"> <img alt="GitHub Workflows" src="docs/img/logo-github-icon.png" width="85"> </a> </td> <td> <a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#terraform"> <picture> <source media="(prefers-color-scheme: light)" srcset="docs/img/logo-opentofu.png" width="160"> <source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-opentofu-dark.png" width="160"> <img alt="OpenTofu" src="docs/img/logo-opentofu.png" width="160"> </picture> </a> </td> <td> <a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#bicep"> <img alt="Bicep" src="docs/img/logo-bicep.png" width="85"> </a> </td> </tr></table>Beta Features
<p align="center"> <picture> <source media="(prefers-color-scheme: light)" srcset="docs/img/logo-databricks.png" width="200"> <source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-databricks-dark.png" width="200"> <img alt="Databricks" src="docs/img/logo-databricks.png" width="200"> </picture> <img alt="NIFCloud" src="docs/img/logo-nifcloud.png" width="110"> <picture> <source media="(prefers-color-scheme: light)" srcset="docs/img/logo-tencentcloud.png" width="180"> <source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-tencentcloud-dark.png" width="180"> <img alt="TencentCloud" src="docs/img/logo-tencentcloud.png" width="180"> </picture> </p>By default, Databricks, NIFCloud, and TencentCloud queries run when you scan Terraform files using KICS.
The Severity and Description of these queries are still under review.
Getting Started
Setting up and using KICS is super-easy.
- First, see how to install and get KICS running.
- Then explore KICS output results format and quickly fix the issues detected.
Interested in more advanced stuff?
See KICS documentation for more details and topics.
How it Works
What makes KICS really powerful and popular is its built-in extensibility. This extensibility is achieved by:
- Fully customizable and adjustable heuristics rules, called queries. These can be easily edited, extended and added.
- Robust but yet simple architecture, which allows quick addition of support for new Infrastructure as Code solutions.
Community
You're welcome to join our community, talk with us on <a href="https://github.com/Checkmarx/kics/discussions" target="_blank">GitHub discussions</a> or contact KICS core team at kics@checkmarx.com.
KICS Contributors
See our individual contributors in the community page. You're welcome to join them by contributing to KICS.
We also like to thank the following organizations for their ongoing contribution:
- Checkmarx
- Bedrock Streaming (since v1.4.8)
- Dynatrace (since v1.5.1)
- Orca Security (since v1.5.10)
KICS Users
KICS is used by various companies and organizations, some are listed below. If you would like to be included here please open a PR.
- Checkmarx (IaC Security)
- GitLab (Infrastructure as Code scanning)
- Bedrock Streaming
- Cisco (CI/CD Securitry)
- Orca Security
- JIT (SAST for IaC)
- Firefly (Firefly Integrates With Checkmarx's KICS)
- Redpanda
- Keptn / Keptn Lifecycle Toolkit
Keeping Infrastructure as Code Secure!
© 2024 Checkmarx Ltd. All Rights Reserved.