Component guide
kics
Infrastructure-as-code security scanning.
Anvil
in Anvil-Complete-+-Onboarding-300
kics
Licence: Apache-2.0 | Language: Go | Source: https://github.com/checkmarx/kics
Role
Infrastructure-as-code scanning
Why it's here
Finds misconfigurations in Terraform, Kubernetes and Docker before they are deployed.
Running it
CLI tool with no server component. Install it from the fetched source and run it in CI.
./fetch-sources.sh ./sources
tar xzf ./sources/kics.tar.gz -C ./sources
This component ships inside the Anvil
stack. See pricing →