oam/knowledge base/kics.md

Kics

1. TL;DR
2. Further readings

TL;DR

Setup

docker pull 'checkmarx/kics'

cat <<EOF > kics.config
---
exclude-paths:
  # The container starts in '/app/bin', these paths are relative to there.
  # See the command in the lefthook configuration.
  - repository/container-images/image-builder
exclude-severities: info,low
EOF

Usage

docker run -t -v "${PWD}:/workdir" 'checkmarx/kics' scan -p '/workdir'
docker run -t -v "${PWD}:/workdir" 'checkmarx/kics' \
  scan -p '/workdir' -o '/workdir/output' --report-formats "glsast,html,pdf" --output-name kics-result

Further readings

• Website
• Codebase