diff --git a/rules/unauthenticated-service/raw.rego b/rules/unauthenticated-service/raw.rego index cdc4c9cc..1b2d7c27 100644 --- a/rules/unauthenticated-service/raw.rego +++ b/rules/unauthenticated-service/raw.rego @@ -29,7 +29,9 @@ deny contains msga if { "packagename": "armo_builtins", "alertObject": {"k8sApiObjects": [wl]}, "relatedObjects": [ - {"object": service}, + {"object": service, + "reviewPaths": ["spec"], + }, ], } } diff --git a/rules/unauthenticated-service/test/fail_service/expected.json b/rules/unauthenticated-service/test/fail_service/expected.json index 6a14dcbd..8e3abc42 100644 --- a/rules/unauthenticated-service/test/fail_service/expected.json +++ b/rules/unauthenticated-service/test/fail_service/expected.json @@ -45,7 +45,7 @@ } } }, - "reviewPaths": null + "reviewPaths": ["spec"] } ], "reviewPaths": ["spec"],