kics scan

kics scan
kics scan -p ./ -o /tmp/results -q $(brew --prefix kics)/share/kics/assets/queries

.../...
Results Summary:
CRITICAL: 0
HIGH: 1317
MEDIUM: 4156
LOW: 2052
INFO: 512
TOTAL: 8037

Generating Reports: Done

Explorer HIGH:

 jq '.queries[] | select(.severity == "HIGH") | {query: .query_name, files: [.files[].file_name]}' /tmp/results/results.json | grep query

See also

• kics [ scan | analyze | --help ]
• Keeping Infrastructure as Code Secure (KICS), execution example, kics