You might have probably heard about kics. It is the abbreviated form of Keeping Infrastructure as Code Secure. Noted to be an open-source solution, it is used for static code analysis of Infrastructure as Code.
KICS finds its security vulnerabilities, infrastructure misconfigurations, and compliance issues in some of the chosen infrastructures as the Code solutions. Some of those are listed below for your reference.
- Open API 3.0 specifications
- Microsoft ARM
- AWS SAM
- Google Deployment Manager
- Helm
- Ansible
- ASW Cloud Formation
- Docker
- Kubernetes
- Terraform
A complete source of help:
The infrastructure as code project is noted to be easy to install and run, which is why more developers and coders are moving towards this solution. The best part is that it is also easy to understand the results related to KICs. Furthermore, if your coder wants, he can easily integrate KICS into CI, which is hard to state with other options available in this competitive market.
Noted to be open source:
Well, KICS is always targeted to be open and will stay like that forever. Both the security queries and the scanning engines are noted as clear and open for any form of the software development community.
Stated to be pretty extendible:
Right from the initial first day, KICS is crafted for extensibility. Some of the points listed below will help you understand this section more:
- First of all, KICS includes more than 2000 fully customizable and adjustable heuristics rules. These are called queries.
- These queries can now be easily extended, edited, and even added.
- On the other hand, the robust yet simple architecture of KICS will allow for that quicker addition of support for some new infrastructure as code solutions.
It is not hard to state that KICS is one community project. It is crafted as an open source right from the first day and anyone can easily find their way to contribute to the said project. It will hardly take you a minute and you can start making a difference. If you want, you get the opportunity to share your expertise with a proper community of multiple software developers and security experts.
KICS is developed by none other than Checkmarx and is simple to run, install, and also to add to your CI. Understanding the results can’t get easy enough! Once you start using its power, you will realize why software developers are moving towards the use of KICS these days!
