Allow specific directory scanning for KICS IaC scanner
Proposal
A customer has a situation where they'd like to specify the directory the KICS IaC scanner scans. Details below.
Zendesk ticket (Internal link only): 624658
- In your organization, what do you consider to be the highest priority for this feature proposal? According to a scale of 1-10, 1 is the lowest priority and 10 is the highest. --> 9
- Why are you interested in this feature? --> We have multiple application folders inside a single repository that we run it separately. We'd like to have this feature to cater to the same.
- What is the problem you are trying to solve? --> We are trying to get the scanning details for a particular application folder we run in our ci-cd pipeline. As of now, the scan is executed for the whole repository which doesn't align with our current setup.
- Do you have any workarounds? --> We tried altering the scanner by running the analyzer for that particular folder at run-time, but the rules we applied to ignore certain scans did not work as we expected.
- What is the impact to your organization of not having this feature? --> Currently, running the scan at the root of the repository generates a lot of data that isn't particularly useful in our current scenario. We would like to generate the scan data for the application folder we deploy through the ci-cd.
- Are there any questions/notes you have for the product manager? --> We need to know if such options of running the scan on a specific folder in GitLab might be introduced in the future or not.
Edited by Michael Gibson