iac.kicsKICS
Runs KICS over Terraform, Dockerfiles, Kubernetes, CloudFormation, Ansible, Bicep and Compose files. Secrets scanning is disabled (use the secret scanners); KICS 2.x scans entirely offline. Results go to a temporary directory, never the target.
- Engine
- Wrapped scanner
- Wraps
kics- Targets
- Infrastructure as code
- Areas
- Security, Best practices, Reliability
- Runs
- Opt-in: only when selected with --only
- Network
- Only the target itself
Run only this auditor
bunx openaudit . --only iac.kicsWraps kics. When it isn't installed, the auditor is skipped with an install hint and the rest of the audit runs.