MEDIUM

849 | Security Opt Not Set
849 | Container Capabilities Unrestricted
764 | Healthcheck Not Set
572 | Pattern Undefined (v3)
545 | Container Traffic Not Bound To Host Interface
131 | Array Without Maximum Number of Items (v3)
60 | Add Instead of Copy
52 | Image Version Not Explicit
35 | Using Unrecommended Namespace
22 | Memory Requests Not Defined
22 | Memory Limits Not Defined
22 | Container Running With Low UID
21 | Seccomp Profile Is Not Configured
21 | Privileged Ports Mapped In Container
21 | NET_RAW Capabilities Not Being Dropped
21 | Container Running As Root
16 | Unpinned Package Version in Apk Add
16 | Service Account Token Automount Not Disabled
13 | Readiness Probe Is Not Configured
10 | Shared Host Network Namespace
8 | Shared Service Account
8 | Secretsmanager Secret Without KMS
8 | RBAC Roles with Read Secrets Permissions
8 | Image Version Using 'latest'
6 | ServiceAccount Allows Access Secrets
6 | Service Account Name Undefined Or Empty
6 | Permissive Access to Create Pods
4 | Service With External Load Balancer
4 | RBAC Roles with Port-Forwarding Permission
4 | IAM policy allows for data exfiltration
3 | Memory Not Limited
2 | VPC Subnet Assigns Public IP
2 | VPC FlowLogs Disabled
2 | S3 Bucket Without Versioning
2 | S3 Bucket Without SSL In Write Actions
2 | S3 Bucket Without Restriction Of Public Bucket
2 | S3 Bucket Without Ignore Public ACL
2 | S3 Bucket Logging Disabled
2 | S3 Bucket Allows Public ACL
2 | Response on operations that should have a body has undefined schema (v3)
2 | RDS Without Logging
2 | RDS With Backup Disabled
2 | RBAC Roles with Exec Permission
2 | Global Server Object Uses HTTP
2 | CloudWatch Logging Disabled
1 | Security Scheme HTTP Unknown Scheme

kics [ scan | analyze | --help ]