# kics を Homebrew, Nix でインストール
kics のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。
## インストール
```sh
sudo av install brew:kics
```
追加のインストールコマンド:
### macOS
- Homebrew (100%):
```sh
brew install kics
```
証拠: local Homebrew formula metadata
### Linux
- Nix (92%):
```sh
nix profile install nixpkgs#kics
```
証拠: nixpkgs package indexes: pkgs/by-name/ki/kics/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
## パッケージ情報
- **パッケージキー:** brew:kics
- **パッケージマネージャ:** Homebrew
- **バージョン:** 2.1.21
- **ソース概要:** Detect vulnerabilities, compliance issues, and misconfigurations
- **ホームページ:**
- **リポジトリ:**
- **最終更新:** 2026-07-30T10:16:03Z
- **生成日時:** 2026-08-03T19:37:03+00:00
## 実行可能ファイル
- kics (エイリアス)
## インストール挙動
- Bottle: 利用不可
## バージョンと鮮度
- ページ生成日: 2026-08-03
- マネージャ版: 2.1.21
## プロジェクトの歴史と使われ方
KICS, short for Keeping Infrastructure as Code Secure, is Checkmarx's open-source scanner for infrastructure-as-code vulnerabilities, compliance problems, and misconfigurations.
### プロジェクトの歴史
Checkmarx created the public KICS repository in 2020 and published v1.0.0 on 2020-11-30. The project arrived during the wider shift from manually provisioned infrastructure toward Terraform, Kubernetes, Helm, CloudFormation, Docker Compose, and other declarative infrastructure formats, where configuration mistakes can become security defects.
### 採用の歴史
KICS adoption is tied to CI and DevSecOps workflows. Official materials document a GitHub Action, a Docker image, a standalone CLI, and broad platform coverage across Terraform, Kubernetes, Docker, CloudFormation, Ansible, Helm, OpenAPI, gRPC, Azure Resource Manager, Pulumi, Serverless Framework, OpenTofu, Bicep, and more.
### 使われ方
Users run `kics scan` or CI integrations against infrastructure repositories to catch risky cloud and orchestration settings before deployment. Query packs and documentation make it useful both for one-off audits and for policy-style checks in build pipelines.
### パッケージ好きにとっての重要性
KICS is significant because it packages a large IaC security rule corpus as a Go CLI that can be installed by package managers, run in containers, or embedded in GitHub workflows. It sits in the same package-nerd mental shelf as Terraform linters, policy engines, and static analyzers, but focuses on concrete misconfiguration checks across many IaC syntaxes.
### タイムライン
- 2020: Checkmarx/kics repository created on GitHub.
- 2020: v1.0.0 release published on 2020-11-30.
- 2021: The 1.1 and 1.2 release series expanded after the initial 1.0 release.
- 2025: The 2.1 release series was active through repeated published releases.
- 2026: v2.1.20 release published on 2026-03-03.
### Related projects
- Official KICS materials include a companion Checkmarx/kics-github-action repository for GitHub Actions integration and documentation for scanning common IaC ecosystems such as Terraform, Kubernetes, Helm, CloudFormation, and Docker Compose.
### ソース
-
-
-
-
-
-
## セキュリティノート
narrow executable package without higher-risk signals.
- **Geiger リスク:** グリーン / 低
- narrow executable package without higher-risk signals
## Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
## Configuration files
- Unix: kics.config
## 他のパッケージマネージャ記録
- Nix - kics: normalized package name match | nixpkgs package indexes: pkgs/by-name/ki/kics/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
## Combined YAML source
View the package source record on GitHub. [combined/kics.yml](https://github.com/mxcl/pkgdb/blob/main/combined/kics.yml)
## ソース
- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph