There are some controls that check the relation between the kubernetes manifest and vulnerabilities. For these controls to work properly, it is necasery to

Supported Servers

Armosec

Integrate With Armosec Server

Navigate to the armosec.io
Click Profile(top right icon)->"User Management"->"API Tokens" and Generate a token
Copy the clientID and secretKey and run:

kubescape config set clientID <>

kubescape config set secretKey <>

Confirm the keys are set

kubescape config view

Expecting:

{
  "accountID": "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX",
  "clientID": "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX",
  "secretKey": "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"
}

If you are missing the accountID field, set it by running kubescape config set accountID <>

For CICD, set environments variables as following:

KS_ACCOUNT_ID  // account id
KS_CLIENT_ID   // client id
KS_SECRET_KEY  // access key