bug(kubernetes): inconsistent scan results for specific directory vs. entire project

[haerter-tss]

Expected Behavior

I have two folders that each contain a values.yaml and a Chart.yaml:

Project1/ui/values.yaml
Project1/ui/Chart.yaml
Project1/shared/values.yaml
Project1/shared/Chart.yaml

There is a high finding (CWE 798 Use of Hard-coded Credentials) in ui/values.yaml, this should be found when scanning the complete projectfolder Project1 as well as when only scanning Project1/ui.
When scanning everything I get a High finding in ui/values.yaml but when I only scan the ui folder the finding is missing.

Actual Behavior

When scanning the entire project directory the high severity finding is detected. However, when scanning the "ui" directory alone, the high severity finding in values.yaml is not detected

(Formatted logs and samples helps us to better understand the issue)

See attached Project1-results.json and ui-results.json. I also attached the sourcecode as ZIP file.

Steps to Reproduce the Problem

1. Scan UI folder
   docker run -t -v "/home/user/Project1/ui":/path checkmarx/kics scan -p /path -o "/path/" --report-formats "json" --ci --exclude-categories "Best practices" --disable-full-descriptions
2. Scan the entire project
   docker run -t -v "/home/user/Project1":/path checkmarx/kics scan -p /path -o "/path/" --report-formats "json" --ci --exclude-categories "Best practices" --disable-full-descriptions
3. Compare the results of both scans

Specifications

• Version: Keeping Infrastructure as Code Secure v2.1.3
• Platform: Linux
• Subsystem: Ubuntu 24.04 / Debian 12.7

code.zip
Project1-results.json
ui-results.json