Rahul Shukla

+1

I am also interested in --exclude feature

I also have the same requirement where need to justify why I am putting that RULE in exception.

This is kind of blocker to use with aws eks and ecr.

It needs change here as well https://github.com/openclarity/kubeclarity/blob/main/runtime_scan/pkg/scanner/creds/ecr.go#L32 to exchange IRSA token.

on Aws enable IRSA https://docs.aws.amazon.com/emr/latest/EMR-on-EKS-DevelopmentGuide/setting-up-enable-IAM.html on Kubeclarity https://medium.com/@samuelbagattin/aws-iam-authentication-for-pods-in-eks-irsa-with-examples-5d8fa16aafba is closet example what needs to be done (igonre the mutating webhook part) User/(helm chart) need to create service account like this...

same issue ...

+1