fix: allow paths in --exclude parameter for IaC commands while maintaining backwards compatibility

- Remove path separator validation only for IaC commands (--iac flag)
- Keep existing validation for open source scanning to maintain backwards compatibility
- Update tests to verify both behaviors work correctly
- IaC commands now support: --exclude=path/to/dir, --exclude=subdir/file.tf
- Open source commands still restrict to: --exclude=dirname, --exclude=filename

Fixes issue where --exclude parameter only worked with single files and directories
without path separators for IaC commands.

Author: bastiandoetsch

src/cli/main.ts

@@ -443,7 +443,8 @@ function validateUnsupportedOptionCombinations(
     if (typeof options.exclude !== 'string') {
       throw new ExcludeFlagBadInputError();
     }
-    if (options.exclude.indexOf(pathLib.sep) > -1) {
+    // Only apply path separator validation for non-IaC commands to maintain backwards compatibility
+    if (!options.iac && options.exclude.indexOf(pathLib.sep) > -1) {
       throw new ExcludeFlagInvalidInputError();
     }
   }

test/jest/acceptance/cli-args.spec.ts

@@ -245,7 +245,7 @@ describe('cli args', () => {
     expect(code).not.toEqual(2);
   });
 
-  test('snyk test --exclude=path/to/dir displays error message', async () => {
+  test('snyk test --exclude=path/to/dir displays error message for open source', async () => {
     const exclude = path.normalize('path/to/dir');
     const { code, stdout } = await runSnykCLI(
       `test --all-projects --exclude=${exclude}`,
@@ -260,6 +260,23 @@ describe('cli args', () => {
     expect(code).toEqual(2);
   });
 
+  test('snyk iac test --exclude=path/to/dir should work with paths', async () => {
+    const exclude = path.normalize('path/to/dir');
+    const { code, stdout } = await runSnykCLI(
+      `iac test --exclude=${exclude}`,
+      {
+        env,
+      },
+    );
+
+    // Should not display error message about paths not being allowed for IaC
+    expect(stdout).not.toContainText(
+      'The --exclude argument must be a comma separated list of directory or file names and cannot contain a path.',
+    );
+    // Should not fail with error code 2 due to path validation for IaC
+    expect(code).not.toEqual(2);
+  });
+
   [
     'config',
     'ignore',