fix(rego): Ignore case when scanning k8s subtype (#1516)

aquasecurity · Jan 12, 2024 · 35a58ce · 35a58ce
1 parent 0b50e6e
commit 35a58ce
Showing 1 changed file with 4 additions and 5 deletions.
diff --git a/pkg/rego/scanner.go b/pkg/rego/scanner.go
@@ -296,11 +296,10 @@ func checkSubtype(ii map[string]interface{}, provider string, subTypes []SubType
 					return true
 				}
 			}
-		case string: // k8s
-			// TODO(simar): This logic probably needs to be revisited
-			if services == st.Group ||
-				services == st.Version ||
-				services == st.Kind {
+		case string: // k8s - logic can be improved
+			if strings.EqualFold(services, st.Group) ||
+				strings.EqualFold(services, st.Version) ||
+				strings.EqualFold(services, st.Kind) {
 				return true
 			}
 		}