ITADN

Incorrect excluded paths in engine iac with kics

#428Closedcajlopezor 创建于 2025-07-22
ErrorReview/Pending
C
cajlopezorcommented
Describe the error When using the kics tool, the engine_iac module incorrectly excludes folders. This results in vulnerabilities being reported in files that should be excluded. How ​​to replicate the bug Step by step to reproduce the error: Go to the pipeline where engine_iac is configured with toolDevsecops: kics. Trigger the pipeline execution. Observe the command that is built internally before running KICS. You will see that report vulnerabilities of excluded paths Runtime environment OS: Ubuntu 20.04 (pipeline agent) Browser: N/A Version: devsecops engine tools - engine_iac version 1.78.0, KICS version 2.1.11
关闭于 2025-07-22 1 条评论