$ man kics
KICS
Infrastructure-as-code scanner with thousands of queries.
fix at sourcepassive / local onlyvia awesome-security
## why a developer should care
Similar to Checkov, with broad coverage (Terraform, CloudFormation, Ansible, Helm, Docker, OpenAPI). Run both and compare - they catch different things.
## install
$ brew install kicsOther platforms and pre-built binaries: official install guide ↗
Check it worked: open a new terminal and run kics version. "command not found" means it isn't installed or isn't on your PATH yet.
## shortcuts
# Scan the current folder
$ kics scan -p .