ZupIT / horusec

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

Home Page:https://horusec.io/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Disable horusec hard coded rules

ne0z opened this issue · comments

What happened: I want to disable specific rules that hardcoded in internal/services/engines/leaks/rules.go
I often get annoyed with these hard-coded rules which tend to show False Positive results and I don't have the ability through Horusec configuration to change or disable them. Any suggestions?

How to reproduce it (as minimally and precisely as possible):

Anything else we need to know?:

Environment:

  • Horusec version (use horusec version): v2.7.1
  • Operating System: Ubuntu 20.04
  • Network plugin / Tool and version (if this is a network-related / tool bug): N/A
  • Others:

A few hours ago I got another idea by overwriting hard-coded rules with custom rules by using same Rule ID but it will rejected with the error message "id: duplicate rule id XX-XXXX-XX". As per check on this line internal/services/custom_rules/custom_rule.go#L152 we are not allowed to overwrite hard-coded rules.

so does Horusec allow disabling rules, I need to disable some rules because of false positives