Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Allow Kubescape image scan to have an allowed exception/CVE list #1564

Open
LiamMccafferty-bud opened this issue Dec 20, 2023 · 2 comments · May be fixed by #1568
Open

Allow Kubescape image scan to have an allowed exception/CVE list #1564

LiamMccafferty-bud opened this issue Dec 20, 2023 · 2 comments · May be fixed by #1568
Labels
feature New feature or request

Comments

@LiamMccafferty-bud
Copy link

LiamMccafferty-bud commented Dec 20, 2023 •
edited

Currently Kubescape scan image does not allow us whitelist CVE's which we accept this can be useful when wanting to use kubescape as a quality gate but dont want to be blocking deployments due to upstream having not yet provisioned a patch. or it being decided to be a wont-fix.

Currently any CVE which reaches the required level eg: critical causes kubescape to return non 0, this can be a pain when the actual project has prioritised this as a low impact or a wont fix. EG
CVE-2023-23914 is marked as critical, however Curl has marked it as a low priority. This vuln only applies to a specific use case of Curl which you may or may not be using.

I would love to be able to pass a list of accepted CVE's I am aware of and accept the risk of deploying and only cause kubescape to non 0 if a CVE not in this list and of the correct level is found.
@LiamMccafferty-bud LiamMccafferty-bud added the feature New feature or request label Dec 20, 2023
VaibhavMalik4187 added a commit to VaibhavMalik4187/kubescape that referenced this issue Dec 31, 2023
@VaibhavMalik4187
Feature: Added exceptions flag in scan image cmd
81c0b2a 
This commit introduces the "exceptions" flag in the scan image command.
Using this flag, the user can pass a list of vulnerabilites the ignore
while scanning an image.

Fixes: kubescape#1564

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
@VaibhavMalik4187 VaibhavMalik4187 linked a pull request Dec 31, 2023 that will close this issue
Open
VaibhavMalik4187 added a commit to VaibhavMalik4187/kubescape that referenced this issue Dec 31, 2023
@VaibhavMalik4187
Feature: Added exceptions flag in scan image cmd
bf8ddbe 
This commit introduces the "exceptions" flag in the scan image command.
Users can pass a list of vulnerabilities they ignore while scanning an
image using this flag.

Fixes: kubescape#1564

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
VaibhavMalik4187 added a commit to VaibhavMalik4187/kubescape that referenced this issue Jan 2, 2024
@VaibhavMalik4187
Feature: Added exceptions flag in scan image cmd
87a704c 
This commit introduces the "exceptions" flag in the scan image command.
Users can pass a list of vulnerabilities they ignore while scanning an
image using this flag.

Fixes: kubescape#1564

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
VaibhavMalik4187 added a commit to VaibhavMalik4187/kubescape that referenced this issue Jan 2, 2024
@VaibhavMalik4187
Feature: Added exceptions flag in scan image cmd
590b535 
This commit introduces the "exceptions" flag in the scan image command.
Users can pass a list of vulnerabilities they ignore while scanning an
image using this flag.

Fixes: kubescape#1564

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
VaibhavMalik4187 added a commit to VaibhavMalik4187/kubescape that referenced this issue Jan 3, 2024
@VaibhavMalik4187
Feature: Added exceptions flag in scan image cmd
a79a704 
This commit introduces the "exceptions" flag in the scan image command.
Users can pass a list of vulnerabilities they ignore while scanning an
image using this flag. Also added tests for the same.

Fixes: kubescape#1564

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
VaibhavMalik4187 added a commit to VaibhavMalik4187/kubescape that referenced this issue Jan 9, 2024
@VaibhavMalik4187
Feature: Added exceptions flag in scan image cmd
3045482 
This commit introduces the "exceptions" flag in the scan image command.
Users can pass a list of vulnerabilities they ignore while scanning an
image using this flag. Also added tests for the same.

Fixes: kubescape#1564

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
@slashben
Copy link
Contributor

Awesome feature request!

@dwertent
Copy link
Contributor

Please see the comments in #1568

VaibhavMalik4187 added a commit to VaibhavMalik4187/kubescape that referenced this issue Jan 13, 2024
@VaibhavMalik4187
Feature: Added exceptions flag in scan image cmd
3431cfa 
This commit introduces the "exceptions" flag in the scan image command.
Users can pass a list of vulnerabilities they ignore while scanning an
image using this flag. Also added tests for the same.

Fixes: kubescape#1564

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
VaibhavMalik4187 added a commit to VaibhavMalik4187/kubescape that referenced this issue Jan 16, 2024
@VaibhavMalik4187
Feature: Added exceptions flag in scan image cmd
c0b9ac7 
This commit introduces the "exceptions" flag in the scan image command.
Users can pass a list of vulnerabilities they ignore while scanning an
image using this flag. Also added tests for the same.

Fixes: kubescape#1564

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
VaibhavMalik4187 added a commit to VaibhavMalik4187/kubescape that referenced this issue Jan 16, 2024
@VaibhavMalik4187
Feature: Added exceptions flag in scan image cmd
8e1d891 
This commit introduces the "exceptions" flag in the scan image command.
Users can pass a list of vulnerabilities they ignore while scanning an
image using this flag. Also added tests for the same.

Fixes: kubescape#1564

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
VaibhavMalik4187 added a commit to VaibhavMalik4187/kubescape that referenced this issue Jan 18, 2024
@VaibhavMalik4187
Feature: Added exceptions flag in scan image cmd
48d5ab5 
This commit introduces the "exceptions" flag in the scan image command.
Users can pass a list of vulnerabilities they ignore while scanning an
image using this flag. Also added tests for the same.

Fixes: kubescape#1564

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
VaibhavMalik4187 added a commit to VaibhavMalik4187/kubescape that referenced this issue Feb 8, 2024
@VaibhavMalik4187
Feature: Added exceptions flag in scan image cmd
a0ee157 
This commit introduces the "exceptions" flag in the scan image command.
Users can pass a list of vulnerabilities they ignore while scanning an
image using this flag. Also added tests for the same.

Fixes: kubescape#1564

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
feature New feature or request
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Feature: Added exceptions flag in scan image cmd VaibhavMalik4187/kubescape
3 participants
@slashben @dwertent @LiamMccafferty-bud