Improve kics analyzer logging to debug ongoing issues

Problem

We have a number of apparently different failures happening in kics in kics IaC scanner fails to run: open /tmp/kics.s... (#351711 - closed). However, they all end with the same line, about there not being a /tmp/kics.sarif file.

In the issue we've asked folks to provide debug logs, but until we have confidence we've addressed the root causes of these failures it would seem prudent to do one of the following:

  • Increase the default log level for the kics analyzer only
  • Otherwise adjust the analyzer to capture the kics output more reliably without manual intervention

Other alternatives welcome.

Edited by Connor Gilbert