fix(k8s): skip passed misconfigs for the summary report

[afdesk]

Description

This PR removes passed misconfigs from the summary report. It's important if --include-non-failures is enabled.

$ minikube start
$ trivy k8s  --scanners=misconfig --report=summary --include-non-failures

Before:

Summary Report for minikube

Workload Assessment
┌───────────┬────────────────────┬───────────────────────┐
│ Namespace │      Resource      │   Misconfigurations   │
│           │                    ├────┬────┬────┬────┬───┤
│           │                    │ C  │ H  │ M  │ L  │ U │
├───────────┼────────────────────┼────┼────┼────┼────┼───┤
│ default   │ Service/kubernetes │ 26 │ 44 │ 25 │ 61 │   │
│           │ Node/minikube      │ 26 │ 44 │ 25 │ 61 │   │
└───────────┴────────────────────┴────┴────┴────┴────┴───┘
Severities: C=CRITICAL H=HIGH M=MEDIUM L=LOW U=UNKNOWN


Infra Assessment
┌─────────────┬──────────────────────────────────────────────┬───────────────────────┐
│  Namespace  │                   Resource                   │   Misconfigurations   │
│             │                                              ├────┬────┬────┬────┬───┤
│             │                                              │ C  │ H  │ M  │ L  │ U │
├─────────────┼──────────────────────────────────────────────┼────┼────┼────┼────┼───┤
│ kube-system │ Pod/kube-controller-manager-minikube         │ 26 │ 44 │ 25 │ 61 │   │
│ kube-system │ ConfigMap/extension-apiserver-authentication │ 26 │ 44 │ 25 │ 61 │   │
│ kube-system │ DaemonSet/kube-proxy                         │ 26 │ 44 │ 25 │ 61 │   │
│ kube-system │ Pod/etcd-minikube                            │ 26 │ 44 │ 25 │ 61 │   │
│ kube-system │ Service/kube-dns                             │ 26 │ 44 │ 25 │ 61 │   │
│ kube-system │ Deployment/coredns                           │ 26 │ 44 │ 25 │ 61 │   │
│ kube-system │ Pod/kube-apiserver-minikube                  │ 26 │ 44 │ 25 │ 61 │   │
│ kube-system │ Pod/kube-scheduler-minikube                  │ 26 │ 44 │ 25 │ 61 │   │
│ kube-system │ Pod/storage-provisioner                      │ 26 │ 44 │ 25 │ 61 │   │
│             │ Node/minikube                                │ 26 │ 44 │ 25 │ 61 │   │
└─────────────┴──────────────────────────────────────────────┴────┴────┴────┴────┴───┘
Severities: C=CRITICAL H=HIGH M=MEDIUM L=LOW U=UNKNOWN

after:

Summary Report for minikube

Workload Assessment
┌───────────┬────────────────────┬───────────────────┐
│ Namespace │      Resource      │ Misconfigurations │
│           │                    ├───┬───┬───┬───┬───┤
│           │                    │ C │ H │ M │ L │ U │
├───────────┼────────────────────┼───┼───┼───┼───┼───┤
│ default   │ Service/kubernetes │   │   │   │ 2 │   │
│           │ Node/minikube      │   │   │   │ 2 │   │
└───────────┴────────────────────┴───┴───┴───┴───┴───┘
Severities: C=CRITICAL H=HIGH M=MEDIUM L=LOW U=UNKNOWN


Infra Assessment
┌─────────────┬──────────────────────────────────────────────┬────────────────────┐
│  Namespace  │                   Resource                   │ Misconfigurations  │
│             │                                              ├───┬───┬───┬────┬───┤
│             │                                              │ C │ H │ M │ L  │ U │
├─────────────┼──────────────────────────────────────────────┼───┼───┼───┼────┼───┤
│ kube-system │ Service/kube-dns                             │   │   │ 1 │ 2  │   │
│ kube-system │ Pod/etcd-minikube                            │   │ 2 │ 6 │ 9  │   │
│ kube-system │ Deployment/coredns                           │   │   │ 8 │ 6  │   │
│ kube-system │ Pod/kube-controller-manager-minikube         │   │ 2 │ 6 │ 12 │   │
│ kube-system │ Pod/kube-scheduler-minikube                  │   │ 2 │ 6 │ 10 │   │
│ kube-system │ Pod/storage-provisioner                      │   │ 3 │ 7 │ 12 │   │
│ kube-system │ ConfigMap/extension-apiserver-authentication │   │   │ 1 │    │   │
│ kube-system │ Pod/kube-apiserver-minikube                  │   │ 2 │ 7 │ 19 │   │
│ kube-system │ DaemonSet/kube-proxy                         │   │ 3 │ 8 │ 12 │   │
│             │ Node/minikube                                │   │ 3 │   │ 2  │   │
└─────────────┴──────────────────────────────────────────────┴───┴───┴───┴────┴───┘
Severities: C=CRITICAL H=HIGH M=MEDIUM L=LOW U=UNKNOWN

Related issues

• Close bug(k8s): --include-non-failures shows incorrect results in trivy k8s scanner #8611

Checklist

• I've read the guidelines for contributing to this repository.
• I've followed the conventions in the PR title.
• I've added tests that prove my fix is effective or that my feature works.
• I've updated the documentation with the relevant information (if needed).
• I've added usage information (if the PR introduces new options)
• I've included a "before" and "after" example to the description (if the PR is a user interface change).

[simar7]

@aqua-bot backport release/v0.61

[aqua-bot]

Backport PR created: #8748