KICS is an open source static analysis solution that enables developers to write more secure infrastructure as code (IaC) KICS automatically detects vulnerabilities, hard-coded keys and passwords, compliance issues, and misconfigurations from the very start of the IaC build cycle, allowing developers to easily remediate these flaws before reaching production. KICS offers more than 1,200 fully customizable and adjustable queries, which cover more than 12 categories ranging from encryption and key management to network ports security.
Source: https://www.helpnetsecurity.com/2021/03/01/checkmarx-kics/