Scan API - support for exception rules

[RomanTheLegend]

Overview

Even the latest version of API (V2 API on Kubescape v3.0.3) doesn't let to send scan exclusions as a part of HTTP request

Valid model arguments:

account | [...]
excludedNamespaces | [...]
failThreshold | [...]
complianceThreshold | [...]
format | [...]
hostScanner | [...]
includeNamespaces | [...]
keepLocal | [...]
submit | [...]
targetNames | [...]
targetType | [...]
useCachedArtifacts | [...]

all while CLI client has --exceptions argument

Solution

Enable a new field in the model to accept JSON with exceptions:
https://github.com/kubescape/kubescape/blob/master/examples/exceptions/exclude-allowed-hostPath-control.json

[KrishAryan]

I would like to work on this issue

[KrishAryan]

@dwertent I am having trouble solving this issue and don't know where to start can you give me some resources to solve this issue so that I can learn and solve these kinds of issue in the future by myself.

[Sanskarzz]

please correct me if i'm wrong
we need to add
Exceptions []armotypes.PostureExceptionPolicy // list of exceptions to apply on scan results
field in type PostScanRequest struct
in https://github.com/kubescape/opa-utils/edit/main/httpserver/meta/v1/datastructure.go

[Sriramkashyapks]

I would like to take on this issue please assign this to me