kics — Scanner di analisi statica per infrastruttura come codice che rileva vulnerabilità di sicurezza, violazioni della conformità e configurazioni errate su Terraform, Kubernetes, CloudFormation e oltre 20 piattaforme IaC. | Kitploit
[![Latest Release](https://img.shields.io/github/v/release/checkmarx/kics)](https://github.com/checkmarx/kics/releases)
[![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)
[![Queries](https://raw.githubusercontent.com/Checkmarx/kics/gh-pages/queries.svg)](https://docs.kics.io/develop/queries/all-queries/)
[![Docker Pulls](https://img.shields.io/docker/pulls/checkmarx/kics)](https://hub.docker.com/r/checkmarx/kics)
![GitHub contributors](https://img.shields.io/github/contributors/checkmarx/kics?color=blue&link=https://github.com/Checkmarx/kics/graphs/contributors)
[![Documentation](https://img.shields.io/badge/docs-viewdocs-blue.svg "Viewdocs")](https://docs.kics.io/)
[![GitHub Discussions](https://img.shields.io/badge/chat-discussions-blue.svg?logo=github)](https://github.com/Checkmarx/kics/discussions)

[![checkmarx](https://img.shields.io/endpoint?url=https://pgp36n22ol.execute-api.eu-west-1.amazonaws.com/dev/cxflowcache-results%3Fstyle=plastic&logoWidth=20&logo=data:image/png;base64,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)](https://sast.checkmarx.net/cxwebclient/portal#/projectState/702/Summary)
[![Codacy Badge](https://app.codacy.com/project/badge/Grade/ceddb5b1b37d4edfa56440842c6248a4)](https://www.codacy.com/gh/Checkmarx/kics/dashboard?utm_source=github.com&amp;utm_medium=referral&amp;utm_content=Checkmarx/kics&amp;utm_campaign=Badge_Grade)
[![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=Checkmarx_kics&metric=alert_status)](https://sonarcloud.io/dashboard?id=Checkmarx_kics)
[![Go Report Card](https://goreportcard.com/badge/github.com/Checkmarx/kics)](https://goreportcard.com/report/github.com/Checkmarx/kics)
[![Go Coverage](https://raw.githubusercontent.com/Checkmarx/kics/gh-pages/coverage.svg)](https://docs.kics.io/coverage.html)

<p align="center">
<img alt="KICS - Keep Infrastructure as Code Secure" src="https://assets.kitploit.com/production/public/readmes/4157/0ec2792139be31de270426a7d3739248b00125024ff141b93c74af7d1968d4c3.png" width="500">
<img alt="KICS - Keep Infrastructure as Code Secure" src="https://assets.kitploit.com/production/public/readmes/4157/d237a89c789e9fd6cb7e8fc50cf944af4ed2c20c3ca685b52083145b92a6f74c.png" width="500">
</p>

---

<a href="https://www.kics.io" title="www.kics.io"><img src="https://assets.kitploit.com/production/public/readmes/4157/17f3e6c9ff3eaea92c881de34a475e37e28255b96d647c3822d124990e6cd00d.png" align="right"></a>

Trova vulnerabilità di sicurezza, problemi di conformità e configurazioni errate dell'infrastruttura nelle prime fasi del ciclo di sviluppo del tuo Infrastructure as Code con **KICS** di Checkmarx.

**KICS** sta per **K**eeping **I**nfrastructure as **C**ode **S**ecure, è open source ed è un must per qualsiasi progetto cloud native.

### Piattaforme supportate

<br>
<table align="center"><tr>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#terraform">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-terraform.png" alt="Terraform" width="120" />
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-terraform-dark.png" alt="Terraform" width="120" />
<img src="https://assets.kitploit.com/production/public/readmes/4157/c9aed37db24a037df333fa68bfb240bef06677fb81707d4ed0aa42c4b33e870a.png" alt="Terraform" width="120" />
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#kubernetes">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-k8s.png" width="160">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-k8s-dark.png" width="160">
<img alt="Kubernetes" src="https://assets.kitploit.com/production/public/readmes/4157/0f7dc2964ac6fc627c6f3974396dad297399f8007c39a533be86217ee411508d.png" width="160">
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#docker">
<img alt="Docker" src="https://assets.kitploit.com/production/public/readmes/4157/d379475f78868d0abcc49ceeb006d3e2d69b362993af8a5f6fa3402258b95c56.png" width="180">
</a>
</td>
</tr></table>
<table align="center"><tr>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#cloudformation">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-cf.png" width="150">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-cf-dark.png" width="150">
<img alt="CloudFormation" src="https://assets.kitploit.com/production/public/readmes/4157/11943f9ad594b53d745ebfed145f04b642f80c3ed9dd0d6bf8e905047730e2ee.png" width="150">
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#ansible">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-ansible.png" width="150">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-ansible-dark.png" width="150">
<img alt="Ansible" src="https://assets.kitploit.com/production/public/readmes/4157/8be56d581bb873a9d46c2e6af81232cd008eed2ccc16a5dc72b6ad140e6e72dd.png" width="150">
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#helm">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-helm-alt.png" width="60">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-helm-dark.png" width="60">
<img alt="Helm" src="https://raw.githubusercontent.com/checkmarx/kics/HEAD/docs/img/logo-helm-alt" width="60">
</picture>
</a>
</td>
</tr></table>
<table align="center"><tr>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#openapi">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-openapi.png" width="185">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-openapi-dark.png" width="185">
<img alt="OpenAPI" src="https://assets.kitploit.com/production/public/readmes/4157/f023afce142677647827c425a5bd12a290e030f93eb05d4311d1b64b2a0bf3d0.png" width="185">
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#grpc">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-grpc.png" width="135">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-grpc-dark.png" width="135">
<img alt="gRPC" src="https://assets.kitploit.com/production/public/readmes/4157/33d05d15115afeecc306242969aa57809bb88d5c96961fdf3623e4c36ecf8dda.png" width="135">
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#azure-resource-manager">
<img alt="Azure Resource Manager" src="https://assets.kitploit.com/production/public/readmes/4157/453c771a5285452165dcc90ae0d85176491333a4158827316a033106304e825c.png" width="65"
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#google-deployment-manager">
<img alt="Google Deployment Manager" src="https://assets.kitploit.com/production/public/readmes/4157/b80bcf198a8c6b38e68876eb49ea9aa0f8a1e5c2677daa862a8940c67f3b20e2.png" width="65">
</a>
</td>
</tr></table>
<table align="center"><tr>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#cdk">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-cdk.png" width="175">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-cdk-dark.png" width="175">
<img alt="Cloud Development Kit" src="https://assets.kitploit.com/production/public/readmes/4157/0799f4388fe6367e83bbe43fb14c8a302a3876427dc68600d6eb2511f425aba2.png" width="175">
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#sam">
<img alt="SAM" src="https://assets.kitploit.com/production/public/readmes/4157/9c85e582cbcdc569d6a2a75f88f870cdb9efb602bdf5c16a6e95d276cd4e9761.png" width="65">
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#docker-compose">
<img alt="Docker Compose" src="https://assets.kitploit.com/production/public/readmes/4157/fa90abcf2020d64c1e4ff0c2df1f584e90a6b0ea75b1db23d4f78c8e81533b4e.png" width="95">
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#knative">
<img alt="Knative" src="https://assets.kitploit.com/production/public/readmes/4157/d5c77fdafba8052d6ff428ae867654ae3a26f3d646cf3ce601c6e604d71c7eab.png" width="85">
</a>
</td>
</tr></table>
<table align="center"><tr>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#crossplane">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-crossplane.png" width="165">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-crossplane-dark.png" width="165">
<img alt="Crossplane" src="https://assets.kitploit.com/production/public/readmes/4157/9e77f83ef5c263abc489f8f2fc77cd4df16b42e45b74cf542eebfe5ee01febe6.png" width="165">
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#pulumi">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-pulumi.png" width="145">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-pulumi-dark.png" width="145">
<img alt="Pulumi" src="https://assets.kitploit.com/production/public/readmes/4157/33ca7fdd848d3747fa46eee3e8720d7d1c8c7bd0fe2de624bb1da6e93954125c.png" width="145">
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#serverlessfw">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-serverlessfw.png" width="170">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-serverlessfw-dark.png" width="170">
<img alt="ServerlessFW" src="https://assets.kitploit.com/production/public/readmes/4157/53374068793be4b124738f49fe76b79a2c71575ac4ff63778d22d2f6a8495464.png" width="170">
</picture>
</a>
</td>
</tr></table>
<table align="center"><tr>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#azure-blueprints">
<img alt="Azure BluePrints" src="https://assets.kitploit.com/production/public/readmes/4157/a045f7d4df6d2856f945584f627bfe5b3d49193cad9c76a2a9b1c484ecbf8832.png" width="85">
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#cicd">
<img alt="GitHub Workflows" src="https://assets.kitploit.com/production/public/readmes/4157/3c8a02fc34f7a6669dbe52a4d176a18784ba0aeb86894cc091fe93662643d539.png" width="85">
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#terraform">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-opentofu.png" width="160">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-opentofu-dark.png" width="160">
<img alt="OpenTofu" src="https://assets.kitploit.com/production/public/readmes/4157/7853c9897f5412ff55d29c53101d19a63fa041f87ceba59c950f60e5ec68113b.png" width="160">
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#bicep">
<img alt="Bicep" src="https://assets.kitploit.com/production/public/readmes/4157/b27077196f6cb4502899ad7e45ccec5320db680af3c12253149219b74a5fa2d2.png" width="85">
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#nifcloud-for-terraform">
<img alt="NIFCloud" src="https://assets.kitploit.com/production/public/readmes/4157/fc053534334a214a2854b7f0b1b3b14d71e4cd3a813eed237c5e345124a73a3a.png" width="110">
</a>
</td>
</tr>
</table>
<table align="center"><tr>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#databricks-for-terraform">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-databricks.png" width="200">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-databricks-dark.png" width="200">
<img alt="Databricks" src="https://assets.kitploit.com/production/public/readmes/4157/e067cd215bba71a26012981d16fd136bfd50475b69b0f19721b77911b48b40c0.png" width="200">
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#tencentcloud-for-terraform">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-tencentcloud.png" width="180">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-tencentcloud-dark.png" width="180">
<img alt="TencentCloud" src="https://assets.kitploit.com/production/public/readmes/4157/d99e18634b952a0798798e17baddf4331d650e98c5365e3f6ba0e08ae66453c1.png" width="180">
</picture>
</a>
</td>
</tr>
</table>

## Per Iniziare

Configurare e usare KICS è semplicissimo.

-   Per prima cosa, consulta come [installare e far funzionare KICS](https://github.com/checkmarx/kics/blob/master/docs/getting-started.md).
-   Poi esplora il [formato dei risultati](https://github.com/checkmarx/kics/blob/master/docs/results.md) di KICS e correggi rapidamente i problemi rilevati.

Interessato a funzionalità più avanzate?
-   Approfondisci le [query](https://github.com/checkmarx/kics/blob/master/docs/queries.md) di KICS.
-   Scopri come [integrare](https://github.com/checkmarx/kics/blob/master/docs/integrations.md) KICS nei tuoi pipeline CI/CD preferiti.

Consulta la [documentazione di KICS](https://docs.kics.io/) per maggiori dettagli e argomenti.

## Come Funziona

Ciò che rende KICS veramente potente e popolare è la sua estensibilità integrata. Questa estensibilità è ottenuta tramite:

-   Regole euristiche completamente personalizzabili e regolabili, chiamate [query](https://github.com/checkmarx/kics/blob/master/docs/queries.md). Possono essere facilmente modificate, estese e aggiunte.
-   Un'[architettura](https://github.com/checkmarx/kics/blob/master/docs/architecture.md) robusta ma semplice, che permette di aggiungere rapidamente il supporto per nuove soluzioni Infrastructure as Code.

## Community

Sei il benvenuto a unirti alla nostra [community](https://github.com/checkmarx/kics/blob/master/docs/community.md), parlare con noi su <a href="https://github.com/Checkmarx/kics/discussions" target="_blank">GitHub discussions</a> o contattare il team principale di KICS all'indirizzo [[email protected]](mailto:[email protected]).

### Contributori di KICS

Consulta i nostri singoli contributori nella pagina [community](https://github.com/checkmarx/kics/blob/master/docs/community.md). Sei il benvenuto a unirti a loro [contribuendo](https://github.com/checkmarx/kics/blob/master/docs/CONTRIBUTING.md) a KICS.

Ringraziamo anche le seguenti organizzazioni per il loro continuo contributo:
-   [Checkmarx](https://checkmarx.com/)
-   [Bedrock Streaming](https://bedrockstreaming.com/) (dalla v1.4.8)
-   [Dynatrace](https://www.dynatrace.com/) (dalla v1.5.1)
-   [Orca Security](https://orca.security/) (dalla v1.5.10)

### Utenti di KICS
KICS è utilizzato da varie aziende e organizzazioni, alcune elencate sotto. Se desideri essere incluso qui, apri una PR.

-   [Checkmarx](https://checkmarx.com/) ([IaC Security](https://checkmarx.com/product/iac-security/))
-   [GitLab](https://gitlab.com/) ([Infrastructure as Code scanning](https://docs.gitlab.com/ee/user/application_security/iac_scanning/))
-   [Bedrock Streaming](https://bedrockstreaming.com/)
-   [Cisco](https://www.panoptica.app/) ([CI/CD Securitry](https://docs.panoptica.app/docs/ci-cd-security))
-   [Orca Security](https://orca.security/)
-   [JIT](https://www.jit.io/) ([SAST for IaC](https://www.jit.io/security-tools/kics))
-   [Firefly](https://www.firefly.ai/) ([Firefly Integrates With Checkmarx's KICS](https://www.firefly.ai/blog/firefly-integrates-with-checkmarxs-kics-to-enable-seamless-cloud-governance-from-code-to-cloud))
-   [Redpanda](https://redpanda.com/)
-   [Keptn](https://github.com/keptn) / [Keptn Lifecycle Toolkit](https://keptn.sh)
 
**Mantenere l'Infrastructure as Code Sicura!**

---

&copy; 2026 Checkmarx Ltd. All Rights Reserved.
kics

Più Popolari
