kics icon indicating copy to clipboard operation
kics copied to clipboard

scope scan by both cloud provider and common(cross provider) option

Open liorj-orca opened this issue 3 years ago • 0 comments

when scanning a repo such as https://github.com/bridgecrewio/terragoat/tree/master/terraform/aws usually you will get all kinds of results - some could be relevant specifically to AWS cloud provider and some are relevant to a common platform such as Docker.

in case which I would like to filter out scan results that are not relevant to my cloud provider, meaning running with --cloud-provider aws flag, there are some results that are not related to any cloud provider(but are related to a platform such as docker) and will be filtered out.

for example, when running the scan on https://github.com/bridgecrewio/terragoat/tree/master/terraform/aws folder with '--cloud-provider aws ' flag there is a query("id": "fd54f200-402c-4333-a5a4-36ef6709af2f", "queryName": "Missing User Instruction") which will be filtered out and that without the cloud provider flag you would have seen it.

my suggestion is to keep showing all these results which don't have a "configured" cloud provider in their metadata. If someone would like to filter them out of the results he could use the ''--type'' flag.

liorj-orca avatar Jun 22 '22 14:06 liorj-orca