update

DefectDojo · Nov 10, 2024 · a51a63f · a51a63f
1 parent c2275a1
commit a51a63f
Showing 1 changed file with 16 additions and 16 deletions.
diff --git a/dojo/tools/kubescape/parser.py b/dojo/tools/kubescape/parser.py
@@ -100,20 +100,20 @@ def get_findings(self, filename, test):
                     steps_to_reproduce += "\t**Rules:** " + str(json.dumps(control["rules"], indent=4)) + "\n"
                     steps_to_reproduce += "Resource object may contain evidence:" + "\n"
                     steps_to_reproduce += "\t**Resource object:** " + str(json.dumps(resource["object"], indent=4))
-
-                    find = Finding(
-                        title=textwrap.shorten(title, 150),
-                        test=test,
-                        description=description,
-                        mitigation=mitigation,
-                        steps_to_reproduce=steps_to_reproduce,
-                        severity=severity,
-                        component_name=resourceid,
-                        static_finding=True,
-                        dynamic_finding=False,
-                    )
-                    findings.append(find)
-                    if controlID is not None:
-                        find.unsaved_vulnerability_ids = []
-                        find.unsaved_vulnerability_ids.append(controlID)
+                    if control["rules"][0]["status"] is not "passed":
+                        find = Finding(
+                            title=textwrap.shorten(title, 150),
+                            test=test,
+                            description=description,
+                            mitigation=mitigation,
+                            steps_to_reproduce=steps_to_reproduce,
+                            severity=severity,
+                            component_name=resourceid,
+                            static_finding=True,
+                            dynamic_finding=False,
+                        )
+                        findings.append(find)
+                        if controlID is not None:
+                            find.unsaved_vulnerability_ids = []
+                            find.unsaved_vulnerability_ids.append(controlID)
         return findings