horusec icon indicating copy to clipboard operation
horusec copied to clipboard

Disable horusec hard coded rules

Open ne0z opened this issue 2 years ago • 2 comments

What happened: I want to disable specific rules that hardcoded in internal/services/engines/leaks/rules.go I often get annoyed with these hard-coded rules which tend to show False Positive results and I don't have the ability through Horusec configuration to change or disable them. Any suggestions?

How to reproduce it (as minimally and precisely as possible):

Anything else we need to know?:

Environment:

  • Horusec version (use horusec version): v2.7.1
  • Operating System: Ubuntu 20.04
  • Network plugin / Tool and version (if this is a network-related / tool bug): N/A
  • Others:

ne0z avatar Jul 11 '22 05:07 ne0z

A few hours ago I got another idea by overwriting hard-coded rules with custom rules by using same Rule ID but it will rejected with the error message "id: duplicate rule id XX-XXXX-XX". As per check on this line internal/services/custom_rules/custom_rule.go#L152 we are not allowed to overwrite hard-coded rules.

ne0z avatar Jul 11 '22 13:07 ne0z

so does Horusec allow disabling rules, I need to disable some rules because of false positives

ngocnn97 avatar Mar 07 '23 01:03 ngocnn97