How to exclude folders from scan?

[andyshinn]

How can I exclude the .terraform folder from my scans? I see there is a -e switch to the scan command. But I have tried several permutations that don't seem to do anything:

• -e ".terraform"
• -e ".terraform/*"
• -e "*/.terraform"
• -e "*/.terraform/*"
• -e "**/.terraform"

But the .terraform folder in each module still gets scanned. How do I exclude it?

[rafaela-soares]

Hello, @andyshinn! Thank you so much for reaching us!

Are you using Docker? If yes, you need to point the volume like this:

• if .terraform is inside of the root of /path/:

docker run -v $pwd/:/path/ checkmarx/kics:latest scan -p /path/ --no-progress -e "/path/.terraform" -v

• if .terraform is inside of the root of /path/folder1:

docker run -v $pwd/:/path/ checkmarx/kics:latest scan -p /path/ --no-progress -e "/path/*/.terraform" -v

Let me know if it helps, please 😊

[andyshinn]

I saw that globbing was released. But I still cannot get it to work. I tried all the options in my original issue and it does not exclude any .terraform folder. How can I exclude all .terraform folders?

[rafaela-soares]

Hello, @andyshinn

Did you try: docker run -v $pwd/:/path/ checkmarx/kics:latest scan -p /path/ --no-progress -e "/path/**/.terraform" -v?

[andyshinn]

I will try with Docker. Does it need an absolute path? I was trying with the binary built on macOS. I was expecting it to use relative paths.

[rafaela-soares]

@andyshinn, you can use your relative path -e <your-relative-project-path>/**/.terraform or -e ./**/.terraform

[andyshinn]

I still cannot get this to work. If I run docker run -t -v $PWD/terraform/vht-organization:/path checkmarx/kics:latest scan -p /path -o "/path/" -e /path/**/.terraform or docker run -t -v $PWD/terraform/vht-organization:/path checkmarx/kics:latest scan -p /path -o "/path/" -e ./**/.terraform it is scanning modules and file sin .terraform directories. What am I missing?

[kaplanlior]

Tagging #5369 as it's easy to miss the reference by GitHub on the right side menu.