Incorrect excluded paths in engine iac with kics
ErrorReview/Pending
Describe the error
When using the kics tool, the engine_iac module incorrectly excludes folders. This results in vulnerabilities being reported in files that should be excluded.
How to replicate the bug
Step by step to reproduce the error:
Go to the pipeline where engine_iac is configured with toolDevsecops: kics.
Trigger the pipeline execution.
Observe the command that is built internally before running KICS.
You will see that report vulnerabilities of excluded paths
Runtime environment
OS: Ubuntu 20.04 (pipeline agent)
Browser: N/A
Version: devsecops engine tools - engine_iac version 1.78.0, KICS version 2.1.11
关闭于 2025-07-22 1 条评论