[![Latest Release](https://img.shields.io/github/v/release/checkmarx/kics)](https://github.com/checkmarx/kics/releases)
[![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)
[![Queries](https://raw.githubusercontent.com/Checkmarx/kics/gh-pages/queries.svg)](https://docs.kics.io/develop/queries/all-queries/)
[![Docker Pulls](https://img.shields.io/docker/pulls/checkmarx/kics)](https://hub.docker.com/r/checkmarx/kics)
![GitHub contributors](https://img.shields.io/github/contributors/checkmarx/kics?color=blue&link=https://github.com/Checkmarx/kics/graphs/contributors)
[![Documentation](https://img.shields.io/badge/docs-viewdocs-blue.svg "Viewdocs")](https://docs.kics.io/)
[![GitHub Discussions](https://img.shields.io/badge/chat-discussions-blue.svg?logo=github)](https://github.com/Checkmarx/kics/discussions)

[![checkmarx](https://img.shields.io/endpoint?url=https://pgp36n22ol.execute-api.eu-west-1.amazonaws.com/dev/cxflowcache-results%3Fstyle=plastic&logoWidth=20&logo=data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAA7EAAAOxAGVKw4bAAADbklEQVRYhc2XTWidRRSGn3MJl1AkZFFcFCkFIYKCYMEgIhZEMtNS2kHBvxYbl1kUIqELQXHhQigtCK266EIoSt0YplbsTJGqaFFahC6yiiJFUIJ2IUGClJLj4vvu/X7uTC7cJOoLH5eZM3Ped37OOXPhP4akOl20XeAQsB+YAsZH9H8HuAVcAxa9CStDBbhgDyKcAfaMSJoVo8pZEd7wJqwNCHDRdlSZF+H0FhO3cR3FeBv+BOjUDM8InEZhm79pFT5w0Xb6Aly0Eyjvb+OqGxBVBzwJMAaA8jLCTrQ3olRbHNBv5TcKxoCH6e10z6cKKMeAr8ZKwsN94r5MABaAd7wJ6yMKwEU7A8SG/+J3Gqo78GBi7tXNkpf4giIUG1CYBOiUl2FHYuLNLSAH1SnQXQnDbYBOlkTZNHmRU+QbkG7bJsi3UF3CQbRS1OFoxwSeRplEuOpN+D1LHO048DbKfNJ3gXPQzANZuGh3CHyNchm4gPKji/axzNgp4BrKfN6jnvU23KwJSMhsds2iPF5rT6jqJy7ae2vEHRftUVR/QNm7wXoCIid6jTIMhYEc0BRzf/9ISpuI7EK54KI1qoyrckZgdsBXfTHCe8Cr3oQ7PdfVEQjNOG3mhC8z454CzolwQ4TZDeavIjwPHK+TVzswHJ+jfIhwNGGbHTL3e+CIN+HnlDF/B2rwJqwjzAFLw5RW0HXgJLAvRw79HUi8S1qavAl/uWifBb0BMjGEfQXkmDfhSr2zLHr3ACveFvknH4YJTd6EZUVe2ZBauQI8UicvI+Qt4A+EXxH9zkV7XyUgVbczuGjCIsqpxJy7wAmE/Ymn1wzK6yjdYqxMA+9C/wiq2ltbSR7Cayi7FZ4rZulPKnLkognXM7uyL9H3BPR2QGSwFEv+eLwJdxFeFOEBhEcReShLXvjrtkoxSFEIe2G4BkzWRWjxGs6iLGLLG42p+5ImOcCaN2G9J2AJaJRMgQMu2peAj0cty2WpfwE4kDAvQZWILgEzrQEd4CNgwUXzS/OM2ncm294N2bpwqS7gvMKbAjsTA/eCtJy0Y3RYuwlVbotwHspL6E1YFWXuX3iSg4LAnDdhtS+gFL2oxSN0eyEsICxWzRZctAfL0rpnK3kVbolw3JvwWVNPAi7aLsohZNN/Tv8GllEuI3zaLsX/C/wDM7pjD59N2pkAAAAASUVORK5CYII=)](https://sast.checkmarx.net/cxwebclient/portal#/projectState/702/Summary)
[![Codacy Badge](https://app.codacy.com/project/badge/Grade/ceddb5b1b37d4edfa56440842c6248a4)](https://www.codacy.com/gh/Checkmarx/kics/dashboard?utm_source=github.com&amp;utm_medium=referral&amp;utm_content=Checkmarx/kics&amp;utm_campaign=Badge_Grade)
[![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=Checkmarx_kics&metric=alert_status)](https://sonarcloud.io/dashboard?id=Checkmarx_kics)
[![Go Report Card](https://goreportcard.com/badge/github.com/Checkmarx/kics)](https://goreportcard.com/report/github.com/Checkmarx/kics)
[![Go Coverage](https://raw.githubusercontent.com/Checkmarx/kics/gh-pages/coverage.svg)](https://docs.kics.io/coverage.html)

<p align="center">
<img alt="KICS - Keep Infrastructure as Code Secure" src="https://assets.kitploit.com/production/public/readmes/4157/0ec2792139be31de270426a7d3739248b00125024ff141b93c74af7d1968d4c3.png" width="500">
<img alt="KICS - Keep Infrastructure as Code Secure" src="https://assets.kitploit.com/production/public/readmes/4157/d237a89c789e9fd6cb7e8fc50cf944af4ed2c20c3ca685b52083145b92a6f74c.png" width="500">
</p>

---

<a href="https://www.kics.io" title="www.kics.io"><img src="https://assets.kitploit.com/production/public/readmes/4157/17f3e6c9ff3eaea92c881de34a475e37e28255b96d647c3822d124990e6cd00d.png" align="right"></a>

Checkmarx의 **KICS**를 사용하여 인프라스트럭처-애즈-코드 개발 주기 초기에 보안 취약점, 규정 준수 문제 및 인프라 잘못된 구성을 조기에 발견하세요.

**KICS**는 **K**eeping **I**nfrastructure as **C**ode **S**ecure의 약자로, 오픈 소스이며 모든 클라우드 네이티브 프로젝트에 필수적인 도구입니다.

### 지원 플랫폼

<br>
<table align="center"><tr>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#terraform">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-terraform.png" alt="Terraform" width="120" />
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-terraform-dark.png" alt="Terraform" width="120" />
<img src="https://assets.kitploit.com/production/public/readmes/4157/c9aed37db24a037df333fa68bfb240bef06677fb81707d4ed0aa42c4b33e870a.png" alt="Terraform" width="120" />
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#kubernetes">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-k8s.png" width="160">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-k8s-dark.png" width="160">
<img alt="Kubernetes" src="https://assets.kitploit.com/production/public/readmes/4157/0f7dc2964ac6fc627c6f3974396dad297399f8007c39a533be86217ee411508d.png" width="160">
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#docker">
<img alt="Docker" src="https://assets.kitploit.com/production/public/readmes/4157/d379475f78868d0abcc49ceeb006d3e2d69b362993af8a5f6fa3402258b95c56.png" width="180">
</a>
</td>
</tr></table>
<table align="center"><tr>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#cloudformation">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-cf.png" width="150">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-cf-dark.png" width="150">
<img alt="CloudFormation" src="https://assets.kitploit.com/production/public/readmes/4157/11943f9ad594b53d745ebfed145f04b642f80c3ed9dd0d6bf8e905047730e2ee.png" width="150">
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#ansible">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-ansible.png" width="150">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-ansible-dark.png" width="150">
<img alt="Ansible" src="https://assets.kitploit.com/production/public/readmes/4157/8be56d581bb873a9d46c2e6af81232cd008eed2ccc16a5dc72b6ad140e6e72dd.png" width="150">
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#helm">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-helm-alt.png" width="60">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-helm-dark.png" width="60">
<img alt="Helm" src="https://raw.githubusercontent.com/checkmarx/kics/HEAD/docs/img/logo-helm-alt" width="60">
</picture>
</a>
</td>
</tr></table>
<table align="center"><tr>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#openapi">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-openapi.png" width="185">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-openapi-dark.png" width="185">
<img alt="OpenAPI" src="https://assets.kitploit.com/production/public/readmes/4157/f023afce142677647827c425a5bd12a290e030f93eb05d4311d1b64b2a0bf3d0.png" width="185">
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#grpc">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-grpc.png" width="135">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-grpc-dark.png" width="135">
<img alt="gRPC" src="https://assets.kitploit.com/production/public/readmes/4157/33d05d15115afeecc306242969aa57809bb88d5c96961fdf3623e4c36ecf8dda.png" width="135">
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#azure-resource-manager">
<img alt="Azure Resource Manager" src="https://assets.kitploit.com/production/public/readmes/4157/453c771a5285452165dcc90ae0d85176491333a4158827316a033106304e825c.png" width="65"
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#google-deployment-manager">
<img alt="Google Deployment Manager" src="https://assets.kitploit.com/production/public/readmes/4157/b80bcf198a8c6b38e68876eb49ea9aa0f8a1e5c2677daa862a8940c67f3b20e2.png" width="65">
</a>
</td>
</tr></table>
<table align="center"><tr>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#cdk">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-cdk.png" width="175">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-cdk-dark.png" width="175">
<img alt="Cloud Development Kit" src="https://assets.kitploit.com/production/public/readmes/4157/0799f4388fe6367e83bbe43fb14c8a302a3876427dc68600d6eb2511f425aba2.png" width="175">
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#sam">
<img alt="SAM" src="https://assets.kitploit.com/production/public/readmes/4157/9c85e582cbcdc569d6a2a75f88f870cdb9efb602bdf5c16a6e95d276cd4e9761.png" width="65">
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#docker-compose">
<img alt="Docker Compose" src="https://assets.kitploit.com/production/public/readmes/4157/fa90abcf2020d64c1e4ff0c2df1f584e90a6b0ea75b1db23d4f78c8e81533b4e.png" width="95">
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#knative">
<img alt="Knative" src="https://assets.kitploit.com/production/public/readmes/4157/d5c77fdafba8052d6ff428ae867654ae3a26f3d646cf3ce601c6e604d71c7eab.png" width="85">
</a>
</td>
</tr></table>
<table align="center"><tr>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#crossplane">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-crossplane.png" width="165">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-crossplane-dark.png" width="165">
<img alt="Crossplane" src="https://assets.kitploit.com/production/public/readmes/4157/9e77f83ef5c263abc489f8f2fc77cd4df16b42e45b74cf542eebfe5ee01febe6.png" width="165">
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#pulumi">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-pulumi.png" width="145">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-pulumi-dark.png" width="145">
<img alt="Pulumi" src="https://assets.kitploit.com/production/public/readmes/4157/33ca7fdd848d3747fa46eee3e8720d7d1c8c7bd0fe2de624bb1da6e93954125c.png" width="145">
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#serverlessfw">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-serverlessfw.png" width="170">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-serverlessfw-dark.png" width="170">
<img alt="ServerlessFW" src="https://assets.kitploit.com/production/public/readmes/4157/53374068793be4b124738f49fe76b79a2c71575ac4ff63778d22d2f6a8495464.png" width="170">
</picture>
</a>
</td>
</tr></table>
<table align="center"><tr>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#azure-blueprints">
<img alt="Azure BluePrints" src="https://assets.kitploit.com/production/public/readmes/4157/a045f7d4df6d2856f945584f627bfe5b3d49193cad9c76a2a9b1c484ecbf8832.png" width="85">
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#cicd">
<img alt="GitHub Workflows" src="https://assets.kitploit.com/production/public/readmes/4157/3c8a02fc34f7a6669dbe52a4d176a18784ba0aeb86894cc091fe93662643d539.png" width="85">
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#terraform">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-opentofu.png" width="160">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-opentofu-dark.png" width="160">
<img alt="OpenTofu" src="https://assets.kitploit.com/production/public/readmes/4157/7853c9897f5412ff55d29c53101d19a63fa041f87ceba59c950f60e5ec68113b.png" width="160">
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#bicep">
<img alt="Bicep" src="https://assets.kitploit.com/production/public/readmes/4157/b27077196f6cb4502899ad7e45ccec5320db680af3c12253149219b74a5fa2d2.png" width="85">
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#nifcloud-for-terraform">
<img alt="NIFCloud" src="https://assets.kitploit.com/production/public/readmes/4157/fc053534334a214a2854b7f0b1b3b14d71e4cd3a813eed237c5e345124a73a3a.png" width="110">
</a>
</td>
</tr>
</table>
<table align="center"><tr>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#databricks-for-terraform">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-databricks.png" width="200">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-databricks-dark.png" width="200">
<img alt="Databricks" src="https://assets.kitploit.com/production/public/readmes/4157/e067cd215bba71a26012981d16fd136bfd50475b69b0f19721b77911b48b40c0.png" width="200">
</picture>
</a>
</td>
<td>
<a href="https://github.com/Checkmarx/kics/blob/master/docs/platforms.md#tencentcloud-for-terraform">
<picture>
<source media="(prefers-color-scheme: light)" srcset="docs/img/logo-tencentcloud.png" width="180">
<source media="(prefers-color-scheme: dark)" srcset="docs/img/logo-tencentcloud-dark.png" width="180">
<img alt="TencentCloud" src="https://assets.kitploit.com/production/public/readmes/4157/d99e18634b952a0798798e17baddf4331d650e98c5365e3f6ba0e08ae66453c1.png" width="180">
</picture>
</a>
</td>
</tr>
</table>

## 시작하기

KICS를 설정하고 사용하는 것은 매우 쉽습니다.

-   먼저, [KICS를 설치하고 실행하는 방법](https://github.com/checkmarx/kics/blob/master/docs/getting-started.md)을 확인하세요.
-   그런 다음 KICS [출력 결과 형식](https://github.com/checkmarx/kics/blob/master/docs/results.md)을 살펴보고 감지된 문제를 신속하게 수정하세요.

더 고급 기능에 관심이 있으신가요?
-   KICS [쿼리](https://github.com/checkmarx/kics/blob/master/docs/queries.md)에 대해 자세히 알아보세요.
-   KICS를 선호하는 CI/CD 파이프라인에 [통합](https://github.com/checkmarx/kics/blob/master/docs/integrations.md)하는 방법을 이해하세요.

자세한 내용과 주제는 [KICS 문서](https://docs.kics.io/)를 참조하세요.

## 작동 방식

KICS를 강력하고 인기 있게 만드는 것은 내장된 확장성입니다. 이러한 확장성은 다음을 통해 달성됩니다:

-   완전히 사용자 정의 가능하고 조정 가능한 휴리스틱 규칙([쿼리](https://github.com/checkmarx/kics/blob/master/docs/queries.md)라고 함)으로, 쉽게 편집, 확장 및 추가할 수 있습니다.
-   새로운 Infrastructure as Code 솔루션에 대한 지원을 신속하게 추가할 수 있는 강력하면서도 간단한 [아키텍처](https://github.com/checkmarx/kics/blob/master/docs/architecture.md).

## 커뮤니티

[커뮤니티](https://github.com/checkmarx/kics/blob/master/docs/community.md)에 참여하시거나 <a href="https://github.com/Checkmarx/kics/discussions" target="_blank">GitHub discussions</a>에서 저희와 대화하시거나 KICS 핵심 팀([[email protected]](mailto:[email protected]))에 문의하세요.

### KICS 기여자

개별 기여자는 [커뮤니티](https://github.com/checkmarx/kics/blob/master/docs/community.md) 페이지에서 확인하세요. [기여](https://github.com/checkmarx/kics/blob/master/docs/CONTRIBUTING.md)를 통해 KICS에 참여하실 수 있습니다.

또한 지속적으로 기여해 주신 다음 조직에 감사드립니다:
-   [Checkmarx](https://checkmarx.com/)
-   [Bedrock Streaming](https://bedrockstreaming.com/) (v1.4.8부터)
-   [Dynatrace](https://www.dynatrace.com/) (v1.5.1부터)
-   [Orca Security](https://orca.security/) (v1.5.10부터)

### KICS 사용자

KICS는 다양한 회사와 조직에서 사용되고 있으며, 그중 일부는 아래에 나열되어 있습니다. 여기에 포함되길 원하시면 PR을 열어주세요.

-   [Checkmarx](https://checkmarx.com/) ([IaC Security](https://checkmarx.com/product/iac-security/))
-   [GitLab](https://gitlab.com/) ([Infrastructure as Code scanning](https://docs.gitlab.com/ee/user/application_security/iac_scanning/))
-   [Bedrock Streaming](https://bedrockstreaming.com/)
-   [Cisco](https://www.panoptica.app/) ([CI/CD Security](https://docs.panoptica.app/docs/ci-cd-security))
-   [Orca Security](https://orca.security/)
-   [JIT](https://www.jit.io/) ([SAST for IaC](https://www.jit.io/security-tools/kics))
-   [Firefly](https://www.firefly.ai/) ([Firefly Integrates With Checkmarx's KICS](https://www.firefly.ai/blog/firefly-integrates-with-checkmarxs-kics-to-enable-seamless-cloud-governance-from-code-to-cloud))
-   [Redpanda](https://redpanda.com/)
-   [Keptn](https://github.com/keptn) / [Keptn Lifecycle Toolkit](https://keptn.sh)
 
**인프라스트럭처-애즈-코드를 안전하게 유지하세요!**

---

&copy; 2026 Checkmarx Ltd. 모든 권리 보유.
도구 다운로드