Checkmarx / kics
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
☆2,285Updated this week
Alternatives and similar repositories for kics:
Users that are interested in kics are comparing it to the libraries listed below
- Tfsec is now part of Trivy☆6,814Updated last week
- Regula checks infrastructure as code templates (Terraform, CloudFormation, k8s manifests) for AWS, Azure, Google Cloud, and Kubernetes se…☆966Updated 8 months ago
- Detect, track and alert on infrastructure drift☆2,533Updated last month
- Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…☆839Updated last year
- OpenClarity is an open source tool built to enhance security and observability of cloud native applications and infrastructure☆1,399Updated this week
- Superseded by https://github.com/aquasecurity/trivy-operator☆1,367Updated 2 weeks ago
- An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchm…☆747Updated 4 months ago
- Supply-chain Levels for Software Artifacts☆1,663Updated this week
- Checklist for container security - devsecops practices☆1,560Updated last year
- A tool to scan Kubernetes cluster for risky permissions☆1,379Updated 5 months ago
- Hunt for security weaknesses in Kubernetes clusters☆4,853Updated last year
- Security risk analysis for Kubernetes resources☆1,317Updated 3 weeks ago
- Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.☆4,923Updated this week
- A service that analyzes docker images and scans for vulnerabilities☆1,586Updated 2 years ago
- ☆524Updated this week
- Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start☆2,890Updated 4 months ago
- A Blazing fast Security Auditing tool for Kubernetes☆996Updated last year
- The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.☆925Updated 2 months ago
- secureCodeBox (SCB) - continuous secure delivery out of the box☆886Updated this week
- Write tests against structured configuration data using the Open Policy Agent Rego query language☆2,966Updated this week
- Pike is a tool for determining the permissions or policy required for IAC code☆709Updated this week
- Agile Threat Modeling Toolkit☆664Updated 2 weeks ago
- Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities☆945Updated last month
- Read your tfstate or HCL to generate a graph specific for each provider, showing only the resources that are most important/relevant.☆1,838Updated 3 months ago
- Kubernetes-native security toolkit☆1,496Updated this week
- 🧵 CLI tool for directly patching container images!☆1,293Updated this week
- Granular, Actionable Adversary Emulation for the Cloud☆1,997Updated last week
- a lightweight, security focused, BDD test framework against terraform.☆1,385Updated 2 months ago
- A curated list for Awesome Kubernetes Security resources☆1,948Updated last year
- GUAC aggregates software security metadata into a high fidelity graph database.☆1,355Updated this week