Skip to content

KICS

Infrastructure as Code

An open‑source scanner that finds security vulnerabilities, compliance issues, and misconfigurations in infrastructure‑as‑code files

Open Policy Agent Latest v2.1.20 · 3mo ago Security brief →

Features

  • Detects security vulnerabilities in IaC definitions
  • Identifies compliance violations across multiple platforms
  • Reports configuration drifts early in the development cycle

Recent releases

View all 2 releases →
v2.1.20 New feature
Notable features
  • Azure Container Registry permissions query
  • Storage Account CMK encryption query
  • AKS audit logs query
v2.1.19 New feature
Security fixes
  • containerd v1.7.30
  • helm v3.19.4
  • buildkit v0.26.3
Notable features
  • Azure private virtual network query
  • Improved CloudFormation query coverage

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
2,644
Forks
368
Languages
Open Policy Agent HCL Go

Beta — feedback welcome: [email protected]