kics.io/community

Hi @dohnalv, thank you for the question.
In some instances, we have different queries (rules) grouped into a single rego file.

The reason for this is to enable us to reuse boilerplate rego code for different rules we're trying to catch.
Example:
-> API spec query "Invalid Schema External Documentation URL" for Swagger and OpenAPI 3.0. Are grouped in this same rego file
-> Several query ports that are being scanned are grouped into a single file

You can get the queries distribution list by running:

pip3 install -r .github/scripts/metrics/requirements.txt
python3 .github/scripts/metrics/get-metrics.py

Currently, these are our numbers:

::group::Queries Metrics
| Platform               |   Count |
|------------------------+---------|
| total                  |    1704 |
| cloudformation_queries |     465 |
| openapi_queries        |     288 |
| ansible_queries        |     235 |
| k8s_queries            |      80 |
| common_queries         |       2 |
| dockerfile_queries     |      53 |
| terraform_queries      |     581 |
::endgroup::

::set-output name=total_queries::1704

::group::Rego File Metrics
| Platform            |   Count |
|---------------------+---------|
| total               |    1148 |
| cloudformation_rego |     223 |
| openapi_rego        |     197 |
| ansible_rego        |     201 |
| k8s_rego            |      80 |
| common_rego         |       2 |
| dockerfile_rego     |      53 |
| terraform_rego      |     392 |

Let me know if you have any more questions.