The check for ignoring should use the resource block (#782)

aquasecurity · Jun 11, 2021 · d4ddd6e · d4ddd6e
1 parent 1273691
commit d4ddd6e
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/internal/app/tfsec/scanner/scanner.go b/internal/app/tfsec/scanner/scanner.go
@@ -85,7 +85,7 @@ func (scanner *Scanner) Scan(blocks []*block.Block) []result.Result {
 }
 
 func (scanner *Scanner) checkRangeIgnored(id string, r block.Range, b block.Range) bool {
-	raw, err := ioutil.ReadFile(r.Filename)
+	raw, err := ioutil.ReadFile(b.Filename)
 	if err != nil {
 		return false
 	}
@@ -110,7 +110,7 @@ func (scanner *Scanner) checkRangeIgnored(id string, r block.Range, b block.Rang
 		}
 	}
 
-	// check the line above the block
+	// check the line above the actual resource block
 	if b.StartLine-1 > 0 {
 		line := lines[b.StartLine-1]
 		if ignored := checkLineForIgnore(line, ignoreAll, ignoreCode); ignored {