KICS
An infrastructure-as-code scanning tool, find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle. Can be extended for additional policies.
Docker › Security: “An infrastructure-as-code scanning tool, find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle. Can be extended for additional policies.”
Security › Web > Development: “Scans IaC projects for security vulnerabilities, compliance issues, and infrastructure misconfiguration. Currently working with Terraform projects, Kubernetes manifests, Dockerfiles, AWS CloudFormation Templates, and Ansible playbooks.”
Terraform › Tools: “Scans IaC projects for security vulnerabilities, compliance issues, and infrastructure misconfiguration. Currently working with Terraform projects, Kubernetes manifests, Dockerfiles, AWS CloudFormation Templates, and Ansible playbooks.”
Ansible › Tools: “SAST Tool that scans your Ansible infrastructure as code playbooks for security vulnerabilities, compliance issues and misconfigurations.”
DevSecOps › Tools > Infrastructure as Code Analysis > Multi-Platform: “Checkmarx - Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle.”
OpenTofu › Tools > Tests: “Open-source static analysis tool that finds security vulnerabilities and misconfigurations in IaC, including OpenTofu.”