From 04b58d40c5ca881a41140ae4dc4b81ba331d616d Mon Sep 17 00:00:00 2001 From: Shunsuke Suzuki Date: Wed, 24 Apr 2024 09:44:46 +0900 Subject: [PATCH] feat: add Checkmarx/kics (#22188) [Checkmarx/kics](https://github.com/Checkmarx/kics): Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx --- pkgs/Checkmarx/kics/pkg.yaml | 10 +++++ pkgs/Checkmarx/kics/registry.yaml | 72 +++++++++++++++++++++++++++++++ registry.yaml | 71 ++++++++++++++++++++++++++++++ 3 files changed, 153 insertions(+) create mode 100644 pkgs/Checkmarx/kics/pkg.yaml create mode 100644 pkgs/Checkmarx/kics/registry.yaml diff --git a/pkgs/Checkmarx/kics/pkg.yaml b/pkgs/Checkmarx/kics/pkg.yaml new file mode 100644 index 0000000000..3b6f56da90 --- /dev/null +++ b/pkgs/Checkmarx/kics/pkg.yaml @@ -0,0 +1,10 @@ +packages: + - name: Checkmarx/kics@v2.0.0 + - name: Checkmarx/kics + version: v1.7.13 + - name: Checkmarx/kics + version: v1.4.4 + - name: Checkmarx/kics + version: v1.2.3 + - name: Checkmarx/kics + version: v1.1.2 diff --git a/pkgs/Checkmarx/kics/registry.yaml b/pkgs/Checkmarx/kics/registry.yaml new file mode 100644 index 0000000000..6e9428e242 --- /dev/null +++ b/pkgs/Checkmarx/kics/registry.yaml @@ -0,0 +1,72 @@ +packages: + - type: github_release + repo_owner: Checkmarx + repo_name: kics + description: Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx + version_constraint: "false" + version_overrides: + - version_constraint: semver("<= 1.1.2") + asset: kics_{{trimV .Version}}_{{.OS}}_{{.Arch}}.{{.Format}} + format: zip + windows_arm_emulation: true + replacements: + amd64: x64 + checksum: + type: github_release + asset: kics_{{trimV .Version}}_checksums.txt + algorithm: sha256 + overrides: + - goos: linux + format: tar.gz + supported_envs: + - linux/amd64 + - windows/amd64 + - version_constraint: semver("<= 1.2.3") + asset: kics_{{trimV .Version}}_{{.OS}}_{{.Arch}}.{{.Format}} + format: tar.gz + rosetta2: true + windows_arm_emulation: true + replacements: + amd64: x64 + checksum: + type: github_release + asset: kics_{{trimV .Version}}_checksums.txt + algorithm: sha256 + overrides: + - goos: windows + format: zip + supported_envs: + - darwin + - windows + - amd64 + - version_constraint: semver("<= 1.4.4") + asset: kics_{{trimV .Version}}_{{.OS}}_{{.Arch}}.{{.Format}} + format: tar.gz + windows_arm_emulation: true + replacements: + amd64: x64 + checksum: + type: github_release + asset: kics_{{trimV .Version}}_checksums.txt + algorithm: sha256 + overrides: + - goos: windows + format: zip + - version_constraint: semver("<= 1.5.1") + asset: kics_{{trimV .Version}}_{{.OS}}_{{.Arch}}.{{.Format}} + format: tar.gz + replacements: + amd64: x64 + checksum: + type: github_release + asset: kics_{{trimV .Version}}_checksums.txt + algorithm: sha256 + overrides: + - goos: windows + format: zip + - version_constraint: "true" + type: go_build + files: + - name: kics + src: ./cmd/console + dir: kics-{{trimV .Version}} diff --git a/registry.yaml b/registry.yaml index 85591bfa38..5d4094b2c1 100644 --- a/registry.yaml +++ b/registry.yaml @@ -943,6 +943,77 @@ packages: linux: unknown-linux-gnu supported_envs: - linux + - type: github_release + repo_owner: Checkmarx + repo_name: kics + description: Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx + version_constraint: "false" + version_overrides: + - version_constraint: semver("<= 1.1.2") + asset: kics_{{trimV .Version}}_{{.OS}}_{{.Arch}}.{{.Format}} + format: zip + windows_arm_emulation: true + replacements: + amd64: x64 + checksum: + type: github_release + asset: kics_{{trimV .Version}}_checksums.txt + algorithm: sha256 + overrides: + - goos: linux + format: tar.gz + supported_envs: + - linux/amd64 + - windows/amd64 + - version_constraint: semver("<= 1.2.3") + asset: kics_{{trimV .Version}}_{{.OS}}_{{.Arch}}.{{.Format}} + format: tar.gz + rosetta2: true + windows_arm_emulation: true + replacements: + amd64: x64 + checksum: + type: github_release + asset: kics_{{trimV .Version}}_checksums.txt + algorithm: sha256 + overrides: + - goos: windows + format: zip + supported_envs: + - darwin + - windows + - amd64 + - version_constraint: semver("<= 1.4.4") + asset: kics_{{trimV .Version}}_{{.OS}}_{{.Arch}}.{{.Format}} + format: tar.gz + windows_arm_emulation: true + replacements: + amd64: x64 + checksum: + type: github_release + asset: kics_{{trimV .Version}}_checksums.txt + algorithm: sha256 + overrides: + - goos: windows + format: zip + - version_constraint: semver("<= 1.5.1") + asset: kics_{{trimV .Version}}_{{.OS}}_{{.Arch}}.{{.Format}} + format: tar.gz + replacements: + amd64: x64 + checksum: + type: github_release + asset: kics_{{trimV .Version}}_checksums.txt + algorithm: sha256 + overrides: + - goos: windows + format: zip + - version_constraint: "true" + type: go_build + files: + - name: kics + src: ./cmd/console + dir: kics-{{trimV .Version}} - type: github_release repo_owner: Cian911 repo_name: switchboard