Increasing Compliance Scanner Scanning Scripts Percentage

Products

• VMware

Issue/Introduction

There is a way to exclude specific scan from a benchmark.

Symptoms:

Your security compliance team may have their own threshold defined for the final scan report result.
Compliance scanner gives the option to select Benchmark in the tile as per https://docs.vmware.com/en/Compliance-Scanner-for-VMware-Tanzu/1.3/addon-compliance-tools/GUID-installing.html#configure-scans-4
However the compliance scanner does not have a built-in option in Opsmanager UI to custom a benchmark for excluding a specific scan that may not be relevant for all your environments.
 

Environment

VMware Tanzu Kubernetes Grid Integrated Edition 1.x

Resolution

The compliance scanner does not have a built-in option in Opsmanager UI to custom a benchmark for excluding a specific scan.

Workaround:

Please contact open a ticket with Tanzu support product for providing the internal workaround (internal information section in this KB) to exclude/custom a specific scan from a benchmark.

 

 

Additional Information

Impact/Risks:
The final scan report result may be low due to specific scan from a benchmark reporting vulnerability.