Merge pull request kubescape#477 from kubescape/scanning-scope

add to known frameworks scope
dwertent · Jul 31, 2023 · 13d7a9b · 13d7a9b
2 parents 0688c71 + f109baf
commit 13d7a9b
Show file tree

Hide file tree

Showing 10 changed files with 56 additions and 0 deletions.
diff --git a/frameworks/__YAMLscan.json b/frameworks/__YAMLscan.json
@@ -4,6 +4,11 @@
     "attributes": {
         "armoBuiltin": true
     },
+    "scanningScope": {
+        "matches": [
+            "file"
+        ]
+    },
     "controlsNames": [
         "Forbidden Container Registries",
         "Exec into container",

diff --git a/frameworks/allcontrols.json b/frameworks/allcontrols.json
@@ -4,6 +4,12 @@
     "attributes": {
         "armoBuiltin": true
     },
+    "scanningScope": {
+        "matches": [
+            "cluster",
+            "file"
+        ]
+    },
     "typeTags": ["compliance"],
     "activeControls": [
         {

diff --git a/frameworks/armobest.json b/frameworks/armobest.json
@@ -4,6 +4,12 @@
     "attributes": {
         "armoBuiltin": true
     },
+    "scanningScope": {
+        "matches": [
+            "cluster",
+            "file"
+        ]
+    },
     "typeTags": ["compliance"],
     "activeControls": [
         {

diff --git a/frameworks/cis-aks-t1.2.0.json b/frameworks/cis-aks-t1.2.0.json
@@ -5,6 +5,11 @@
         "version": "v1.2.0",
         "armoBuiltin": true
     },
+    "scanningScope": {
+        "matches": [
+            "AKS"
+        ]
+    },
     "typeTags": ["compliance"],
     "activeControls": [
         {

diff --git a/frameworks/cis-eks-t1.2.0.json b/frameworks/cis-eks-t1.2.0.json
@@ -5,6 +5,11 @@
         "version": "v1.2.0",
         "armoBuiltin": true
     },
+    "scanningScope": {
+        "matches": [
+            "EKS"
+        ]
+    },
     "typeTags": ["compliance"],
     "activeControls": [
         {

diff --git a/frameworks/cis-v1.23-t1.0.1.json b/frameworks/cis-v1.23-t1.0.1.json
@@ -5,6 +5,11 @@
         "version": "v1.0.1",
         "armoBuiltin": true
     },
+    "scanningScope": {
+        "matches": [
+            "cloud"
+        ]
+    },
     "typeTags": ["compliance"],
     "subSections": {
         "1": {

diff --git a/frameworks/devopsbest.json b/frameworks/devopsbest.json
@@ -4,6 +4,12 @@
     "attributes": {
         "armoBuiltin": true
     },
+    "scanningScope": {
+        "matches": [
+            "cluster",
+            "file"
+        ]
+    },
     "typeTags": ["compliance"],
     "activeControls": [
         {

diff --git a/frameworks/mitre.json b/frameworks/mitre.json
@@ -4,6 +4,12 @@
     "attributes": {
         "armoBuiltin": true
     },
+    "scanningScope": {
+        "matches": [
+            "cluster",
+            "file"
+        ]
+    },
     "typeTags": ["compliance"],
     "activeControls": [
         {

diff --git a/frameworks/nsaframework.json b/frameworks/nsaframework.json
@@ -4,6 +4,12 @@
     "attributes": {
         "armoBuiltin": true
     },
+    "scanningScope": {
+        "matches": [
+            "cluster",
+            "file"
+        ]
+    },
     "typeTags": ["compliance"],
     "activeControls": [
         {

diff --git a/frameworks/security.json b/frameworks/security.json
@@ -7,6 +7,12 @@
     "typeTags": [
         "security"
     ],
+    "scanningScope": {
+        "matches": [
+            "cluster",
+            "file"
+        ]
+    },
     "activeControls": [
         {
             "controlID": "C-0009",