Would like to be able to ignore folders in KICS
Original Request
There is an example for ignoring folders for nodejs-scan here:
[nodejs-scan] description = 'custom ruleset for nodejs-scan' [[nodejs-scan.passthrough]] type = "raw" value = ''' - nodejs-extensions: - .js template-extensions: - .new - .hbs - '' ignore-filenames: - skip.js ignore-paths: - __MACOSX - skip_dir - node_modules ignore-extensions: - .hbs ignore-rules: - regex_injection_dos - pug_jade_template - express_xss
As you can see, it ignores the node_modules folder. I am getting many false positives for the node_modules folder with the KICS. I requested information on how to do the same thing you have for nodejs only for KICS and was told to add a feature proposal.
References
Related feature request on GitHub: https://github.com/Checkmarx/kics/issues/5113, though this request also includes a request to combine tfvars into the specs.