Exceptions for KICS false positives

NETWAYS · Oct 23, 2024 · 118b512 · 118b512
1 parent 9638e4b
commit 118b512
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/molecule/elasticsearch_no-security/verify.yml b/molecule/elasticsearch_no-security/verify.yml
@@ -9,6 +9,7 @@
   tasks:
 
 # Remember, this is the no-security scenario. So no https
+# kics-scan ignore-block
     - name: Health check
       ansible.builtin.uri:
         url: http://localhost:{{ elasticstack_elasticsearch_http_port }}/_cluster/health
@@ -22,6 +23,7 @@
       delay: 10
       when: groups[elasticstack_elasticsearch_group_name] | length > 1
 
+# kics-scan ignore-block
     - name: Node check
       ansible.builtin.uri:
         url: http://localhost:{{ elasticstack_elasticsearch_http_port }}/_cat/nodes

diff --git a/roles/elasticsearch/tasks/main.yml b/roles/elasticsearch/tasks/main.yml
@@ -244,6 +244,7 @@
     enabled: yes
   register: elasticsearch_freshstart
 
+# kics-scan ignore-block
 - name: Handle cluster setup without security
   when: not elasticsearch_security | bool
   block: