core(exceptions): Edit system exceptions

[dwertent]

PR Type:

Enhancement

---

PR Description:

This PR introduces enhancements to the system exceptions handling in the project. It adds support for system exceptions when setting a label or annotation with kubescape.io/ignore:true. The PR also updates the default exceptions with the latest controls. The changes are primarily reflected in the kubescape.json file.

---

PR Main Files Walkthrough:

exceptions/kubescape.json: The file has been significantly updated to include a new system exception named 'kubescape-ignore'. This exception is triggered when the label or annotation kubescape.io/ignore is set to true, yes, 1, enable, or enabled. Additionally, several new controls and resources have been added to the existing exceptions. The changes also include the addition of new attributes to the resources and posture policies.

---

User Description:

Overview

• Support system exceptions when setting a label or annotation with kubescape.io/ignore:true
• Update KS exceptions with the latest controls

[github-actions]

Summary:

• License scan: failure
• Credentials scan: success
• Vulnerabilities scan: success
• Unit test: success
• Go linting: success

[github-actions]

Summary:

• License scan: failure
• Credentials scan: success
• Vulnerabilities scan: success
• Unit test: success
• Go linting: success

[dwertent]

It looks like there is an issue in Kubescape.
I'm working on it.

[github-actions]

Summary:

• License scan: failure
• Credentials scan: success
• Vulnerabilities scan: failure
• Unit test: success
• Go linting: success

[github-actions]

Summary:

• License scan: failure
• Credentials scan: success
• Vulnerabilities scan: failure
• Unit test: success
• Go linting: success

[codiumai-pr-agent-free]

PR Analysis

• 🎯 Main theme: Enhancing system exceptions handling
• 📝 PR summary: This PR introduces enhancements to the system exceptions handling in the project. It adds support for system exceptions when setting a label or annotation with kubescape.io/ignore:true. The PR also updates the default exceptions with the latest controls.
• 📌 Type of PR: Enhancement
• 🧪 Relevant tests added: No
• 🔒 Security concerns: No security concerns found

PR Feedback

• 💡 General suggestions: The PR is well-structured and the changes are clear. However, it would be beneficial to include unit tests to ensure the new exceptions are working as expected. Additionally, it would be helpful to provide more context around the new controls added to the exceptions.

• 🤖 Code feedback:

  • relevant file: exceptions/kubescape.json
    suggestion: Consider using a list or array for the "kubescape.io/ignore" attribute values to avoid redundancy. This will make the code more maintainable and easier to read. [important]
    relevant line: "attributes": {

  • relevant file: exceptions/kubescape.json
    suggestion: It would be beneficial to add comments explaining the purpose of the new controls added to the exceptions. This will make the code easier to understand for other developers. [medium]
    relevant line: {

How to use

To invoke the PR-Agent, add a comment using one of the following commands:
/review [-i]: Request a review of your Pull Request. For an incremental review, which only considers changes since the last review, include the '-i' option.
/describe: Modify the PR title and description based on the contents of the PR.
/improve [--extended]: Suggest improvements to the code in the PR. Extended mode employs several calls, and provides a more thorough feedback.
/ask <QUESTION>: Pose a question about the PR.
/update_changelog: Update the changelog based on the PR's contents.

To edit any configuration parameter from configuration.toml, add --config_path=new_value
For example: /review --pr_reviewer.extra_instructions="focus on the file: ..."
To list the possible configuration parameters, use the /config command.

[github-actions]

Summary:

• License scan: failure
• Credentials scan: success
• Vulnerabilities scan: failure
• Unit test: success
• Go linting: success