Marking False possitive

[mithu36]

Hi, do kubescape have feature to mark some result as false possitive??
example:
having a text file where we can put the False positive test case and while kubescape doing the scan it will avoid hat one from the final result like IAC scanner?

[dwertent]

Hi,
Sure, you can ignore failures by using exceptions.

[mithu36]

Hi,
I tried this but when I'm ignoring failures with "controlID" the failure count of some other control names is increasing!
why is it happening??
I tried scanning with exception and without exception that time i found this.

[dwertent]

Can you please attach an example so I can look into it?

[mithu36]

screenshot after adding exception:

without adding exception:

as you can see in image the screenshot- after adding exception the failed number increases and other control name failed resource also increases

[dwertent]

This might happen because when you use your own exceptions file it overrides the default exceptions that we set up. The default exceptions typically exclude the kube-system related resources.

If you want to use your exceptions and the default exceptions, you should first download the default exceptions kubescape download , add your exceptions to the downloaded file and use that when scanning.

[mithu36]

so i should run the command with modified exception??
kubescape scan --exceptions exceptions.json