kics — Analyseur statique pour l'infrastructure en tant que code qui détecte les vulnérabilités de sécurité, les violations de conformité et les mauvaises configurations sur Terraform, Kubernetes, CloudFormation et plus de 20 plateformes IaC. | Kitploit
[![Dernière version](https://img.shields.io/github/v/release/checkmarx/kics)](https://github.com/checkmarx/kics/releases)
[![Licence](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)
[![Requêtes](https://raw.githubusercontent.com/Checkmarx/kics/gh-pages/queries.svg)](https://docs.kics.io/develop/queries/all-queries/)
[![Téléchargements Docker](https://img.shields.io/docker/pulls/checkmarx/kics)](https://hub.docker.com/r/checkmarx/kics)
![Contributeurs GitHub](https://img.shields.io/github/contributors/checkmarx/kics?color=blue&link=https://github.com/Checkmarx/kics/graphs/contributors)
[![Documentation](https://img.shields.io/badge/docs-viewdocs-blue.svg "Viewdocs")](https://docs.kics.io/)
[![Discussions GitHub](https://img.shields.io/badge/chat-discussions-blue.svg?logo=github)](https://github.com/Checkmarx/kics/discussions)

[![checkmarx](https://img.shields.io/endpoint?url=https://pgp36n22ol.execute-api.eu-west-1.amazonaws.com/dev/cxflowcache-results%3Fstyle=plastic&logoWidth=20&logo=data:image/png;base64,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)](https://sast.checkmarx.net/cxwebclient/portal#/projectState/702/Summary)
[![Badge Codacy](https://app.codacy.com/project/badge/Grade/ceddb5b1b37d4edfa56440842c6248a4)](https://www.codacy.com/gh/Checkmarx/kics/dashboard?utm_source=github.com&amp;utm_medium=referral&amp;utm_content=Checkmarx/kics&amp;utm_campaign=Badge_Grade)
[![Statut du Quality Gate](https://sonarcloud.io/api/project_badges/measure?project=Checkmarx_kics&metric=alert_status)](https://sonarcloud.io/dashboard?id=Checkmarx_kics)
[![Carte de rapport Go](https://goreportcard.com/badge/github.com/Checkmarx/kics)](https://goreportcard.com/report/github.com/Checkmarx/kics)
[![Couverture Go](https://raw.githubusercontent.com/Checkmarx/kics/gh-pages/coverage.svg)](https://docs.kics.io/coverage.html)

<p align="center">
<img alt="KICS - Gardez l'infrastructure en tant que code sécurisée" src="https://assets.kitploit.com/production/public/readmes/4157/0ec2792139be31de270426a7d3739248b00125024ff141b93c74af7d1968d4c3.png" width="500">
<img alt="KICS - Gardez l'infrastructure en tant que code sécurisée" src="https://assets.kitploit.com/production/public/readmes/4157/d237a89c789e9fd6cb7e8fc50cf944af4ed2c20c3ca685b52083145b92a6f74c.png" width="500">
</p>

---

<a href="https://www.kics.io" title="www.kics.io"><img src="https://assets.kitploit.com/production/public/readmes/4157/17f3e6c9ff3eaea92c881de34a475e37e28255b96d647c3822d124990e6cd00d.png" align="right"></a>

Détectez les vulnérabilités de sécurité, les problèmes de conformité et les mauvaises configurations d'infrastructure dès le début du cycle de développement de votre infrastructure en tant que code avec **KICS** de Checkmarx.

**KICS** signifie **K**eeping **I**nfrastructure as **C**ode **S**ecure (Garder l'infrastructure en tant que code sécurisée), il est open source et est indispensable pour tout projet cloud natif.

### Plateformes prises en charge

<br>
<table align="center"><tr>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#terraform">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-terraform.png" alt="Terraform" width="120" />
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-terraform-dark.png" alt="Terraform" width="120" />
<img src="https://assets.kitploit.com/production/public/readmes/4157/c9aed37db24a037df333fa68bfb240bef06677fb81707d4ed0aa42c4b33e870a.png" alt="Terraform" width="120" />
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#kubernetes">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-k8s.png" width="160">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-k8s-dark.png" width="160">
<img alt="Kubernetes" src="https://assets.kitploit.com/production/public/readmes/4157/0f7dc2964ac6fc627c6f3974396dad297399f8007c39a533be86217ee411508d.png" width="160">
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#docker">
<img alt="Docker" src="https://assets.kitploit.com/production/public/readmes/4157/d379475f78868d0abcc49ceeb006d3e2d69b362993af8a5f6fa3402258b95c56.png" width="180">
</a>
</td>
</tr></table>
<table align="center"><tr>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#cloudformation">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-cf.png" width="150">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-cf-dark.png" width="150">
<img alt="CloudFormation" src="https://assets.kitploit.com/production/public/readmes/4157/11943f9ad594b53d745ebfed145f04b642f80c3ed9dd0d6bf8e905047730e2ee.png" width="150">
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#ansible">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-ansible.png" width="150">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-ansible-dark.png" width="150">
<img alt="Ansible" src="https://assets.kitploit.com/production/public/readmes/4157/8be56d581bb873a9d46c2e6af81232cd008eed2ccc16a5dc72b6ad140e6e72dd.png" width="150">
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#helm">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-helm-alt.png" width="60">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-helm-dark.png" width="60">
<img alt="Helm" src="https://raw.githubusercontent.com/checkmarx/kics/HEAD/docs/img/logo-helm-alt" width="60">
</picture>
</a>
</td>
</tr></table>
<table align="center"><tr>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#openapi">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-openapi.png" width="185">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-openapi-dark.png" width="185">
<img alt="OpenAPI" src="https://assets.kitploit.com/production/public/readmes/4157/f023afce142677647827c425a5bd12a290e030f93eb05d4311d1b64b2a0bf3d0.png" width="185">
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#grpc">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-grpc.png" width="135">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-grpc-dark.png" width="135">
<img alt="gRPC" src="https://assets.kitploit.com/production/public/readmes/4157/33d05d15115afeecc306242969aa57809bb88d5c96961fdf3623e4c36ecf8dda.png" width="135">
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#azure-resource-manager">
<img alt="Azure Resource Manager" src="https://assets.kitploit.com/production/public/readmes/4157/453c771a5285452165dcc90ae0d85176491333a4158827316a033106304e825c.png" width="65"
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#google-deployment-manager">
<img alt="Google Deployment Manager" src="https://assets.kitploit.com/production/public/readmes/4157/b80bcf198a8c6b38e68876eb49ea9aa0f8a1e5c2677daa862a8940c67f3b20e2.png" width="65">
</a>
</td>
</tr></table>
<table align="center"><tr>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#cdk">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-cdk.png" width="175">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-cdk-dark.png" width="175">
<img alt="Cloud Development Kit" src="https://assets.kitploit.com/production/public/readmes/4157/0799f4388fe6367e83bbe43fb14c8a302a3876427dc68600d6eb2511f425aba2.png" width="175">
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#sam">
<img alt="SAM" src="https://assets.kitploit.com/production/public/readmes/4157/9c85e582cbcdc569d6a2a75f88f870cdb9efb602bdf5c16a6e95d276cd4e9761.png" width="65">
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#docker-compose">
<img alt="Docker Compose" src="https://assets.kitploit.com/production/public/readmes/4157/fa90abcf2020d64c1e4ff0c2df1f584e90a6b0ea75b1db23d4f78c8e81533b4e.png" width="95">
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#knative">
<img alt="Knative" src="https://assets.kitploit.com/production/public/readmes/4157/d5c77fdafba8052d6ff428ae867654ae3a26f3d646cf3ce601c6e604d71c7eab.png" width="85">
</a>
</td>
</tr></table>
<table align="center"><tr>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#crossplane">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-crossplane.png" width="165">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-crossplane-dark.png" width="165">
<img alt="Crossplane" src="https://assets.kitploit.com/production/public/readmes/4157/9e77f83ef5c263abc489f8f2fc77cd4df16b42e45b74cf542eebfe5ee01febe6.png" width="165">
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#pulumi">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-pulumi.png" width="145">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-pulumi-dark.png" width="145">
<img alt="Pulumi" src="https://assets.kitploit.com/production/public/readmes/4157/33ca7fdd848d3747fa46eee3e8720d7d1c8c7bd0fe2de624bb1da6e93954125c.png" width="145">
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#serverlessfw">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-serverlessfw.png" width="170">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-serverlessfw-dark.png" width="170">
<img alt="ServerlessFW" src="https://assets.kitploit.com/production/public/readmes/4157/53374068793be4b124738f49fe76b79a2c71575ac4ff63778d22d2f6a8495464.png" width="170">
</picture>
</a>
</td>
</tr></table>
<table align="center"><tr>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#azure-blueprints">
<img alt="Azure BluePrints" src="https://assets.kitploit.com/production/public/readmes/4157/a045f7d4df6d2856f945584f627bfe5b3d49193cad9c76a2a9b1c484ecbf8832.png" width="85">
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#cicd">
<img alt="GitHub Workflows" src="https://assets.kitploit.com/production/public/readmes/4157/3c8a02fc34f7a6669dbe52a4d176a18784ba0aeb86894cc091fe93662643d539.png" width="85">
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#terraform">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-opentofu.png" width="160">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-opentofu-dark.png" width="160">
<img alt="OpenTofu" src="https://assets.kitploit.com/production/public/readmes/4157/7853c9897f5412ff55d29c53101d19a63fa041f87ceba59c950f60e5ec68113b.png" width="160">
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#bicep">
<img alt="Bicep" src="https://assets.kitploit.com/production/public/readmes/4157/b27077196f6cb4502899ad7e45ccec5320db680af3c12253149219b74a5fa2d2.png" width="85">
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#nifcloud-for-terraform">
<img alt="NIFCloud" src="https://assets.kitploit.com/production/public/readmes/4157/fc053534334a214a2854b7f0b1b3b14d71e4cd3a813eed237c5e345124a73a3a.png" width="110">
</a>
</td>
</tr>
</table>
<table align="center"><tr>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#databricks-for-terraform">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-databricks.png" width="200">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-databricks-dark.png" width="200">
<img alt="Databricks" src="https://assets.kitploit.com/production/public/readmes/4157/e067cd215bba71a26012981d16fd136bfd50475b69b0f19721b77911b48b40c0.png" width="200">
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#tencentcloud-for-terraform">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-tencentcloud.png" width="180">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-tencentcloud-dark.png" width="180">
<img alt="TencentCloud" src="https://assets.kitploit.com/production/public/readmes/4157/d99e18634b952a0798798e17baddf4331d650e98c5365e3f6ba0e08ae66453c1.png" width="180">
</picture>
</a>
</td>
</tr>
</table>

## Pour commencer

Configurer et utiliser KICS est très simple.

-   Tout d'abord, voyez comment [installer et faire fonctionner KICS](https://github.com/checkmarx/kics/blob/master/docs/getting-started.md).
-   Ensuite, explorez le [format des résultats de KICS](https://github.com/checkmarx/kics/blob/master/docs/results.md) et corrigez rapidement les problèmes détectés.

Intéressé par des aspects plus avancés ?
-   Plongez dans les [requêtes](https://github.com/checkmarx/kics/blob/master/docs/queries.md) de KICS.
-   Comprenez comment [intégrer](https://github.com/checkmarx/kics/blob/master/docs/integrations.md) KICS dans vos pipelines CI/CD préférés.

Consultez la [documentation de KICS](https://docs.kics.io/) pour plus de détails et de sujets.

## Comment ça fonctionne

Ce qui rend KICS vraiment puissant et populaire, c'est son extensibilité intégrée. Cette extensibilité est obtenue par :

-   Des règles heuristiques entièrement personnalisables et ajustables, appelées [requêtes](https://github.com/checkmarx/kics/blob/master/docs/queries.md). Elles peuvent être facilement modifiées, étendues et ajoutées.
-   Une [architecture](https://github.com/checkmarx/kics/blob/master/docs/architecture.md) robuste mais simple, qui permet d'ajouter rapidement le support de nouvelles solutions d'Infrastructure en tant que Code.

## Communauté

Vous êtes invités à rejoindre notre [communauté](https://github.com/checkmarx/kics/blob/master/docs/community.md), à discuter avec nous sur <a href="https://github.com/Checkmarx/kics/discussions" target="_blank">les discussions GitHub</a> ou à contacter l'équipe principale de KICS à [[email protected]](mailto:[email protected]).

### Contributeurs de KICS

Consultez nos contributeurs individuels sur la page [communauté](https://github.com/checkmarx/kics/blob/master/docs/community.md). Vous êtes invités à les rejoindre en [contribuant](https://github.com/checkmarx/kics/blob/master/docs/CONTRIBUTING.md) à KICS.

Nous tenons également à remercier les organisations suivantes pour leur contribution continue :
-   [Checkmarx](https://checkmarx.com/)
-   [Bedrock Streaming](https://bedrockstreaming.com/) (depuis v1.4.8)
-   [Dynatrace](https://www.dynatrace.com/) (depuis v1.5.1)
-   [Orca Security](https://orca.security/) (depuis v1.5.10)

### Utilisateurs de KICS
KICS est utilisé par diverses entreprises et organisations, dont certaines sont listées ci-dessous. Si vous souhaitez être inclus ici, veuillez ouvrir une PR.

-   [Checkmarx](https://checkmarx.com/) ([Sécurité IaC](https://checkmarx.com/product/iac-security/))
-   [GitLab](https://gitlab.com/) ([Analyse de l'Infrastructure en tant que Code](https://docs.gitlab.com/ee/user/application_security/iac_scanning/))
-   [Bedrock Streaming](https://bedrockstreaming.com/)
-   [Cisco](https://www.panoptica.app/) ([Sécurité CI/CD](https://docs.panoptica.app/docs/ci-cd-security))
-   [Orca Security](https://orca.security/)
-   [JIT](https://www.jit.io/) ([SAST pour IaC](https://www.jit.io/security-tools/kics))
-   [Firefly](https://www.firefly.ai/) ([Firefly s'intègre avec KICS de Checkmarx](https://www.firefly.ai/blog/firefly-integrates-with-checkmarxs-kics-to-enable-seamless-cloud-governance-from-code-to-cloud))
-   [Redpanda](https://redpanda.com/)
-   [Keptn](https://github.com/keptn) / [Keptn Lifecycle Toolkit](https://keptn.sh)
 
**Gardez l'infrastructure en tant que code sécurisée !**

---

&copy; 2026 Checkmarx Ltd. Tous droits réservés.
kics

Populaires
