# kics

**Licence:** Apache-2.0 | **Language:** Go | **Source:** https://github.com/checkmarx/kics

## Role

Infrastructure-as-code scanning

## Why it's here

Finds misconfigurations in Terraform, Kubernetes and Docker before they are deployed.

## Running it

CLI tool with no server component. Install it from the fetched source and run it in CI.

```bash
./fetch-sources.sh ./sources
tar xzf ./sources/kics.tar.gz -C ./sources
```