2857 security report get exploit on node fix

[ilija-lazoroski]

What does this PR do?

Fixes part of #2857

Fix reporting UTs is the only thing left

PR Checklist

• Have you added an explanation of what your changes do and why you'd like to include them?
• Is the TravisCI build passing?
• Was the CHANGELOG.md updated to reflect the changes?
• Was the documentation framework updated to reflect the changes?
• Have you checked that you haven't introduced any duplicate code?

Testing Checklist

• Added relevant unit tests?
• Have you successfully tested your changes locally? Elaborate:

  Tested by {Running the Monkey locally with relevant config/running Island/...}

• If applicable, add screenshots or log transcripts of the feature working

[VakarisZ]

It would be best to somehow add the hard-coded manifests to the repository. Otherwise the whole codebase needs to know what is hard-coded and what is not or that "hard-coded" plugins is even a thing

[ilija-lazoroski]

That would require more work. We can discuss it over webex and decide. All in all, hard-coded exploiters will go away at some point so I don't know if it is worth it.

[shreyamalviya]

I agree. They'll go away so it's not worth the effort.

[VakarisZ]

If we add a decorator to the plugin repository that would return hard-coded plugins if a plugin is missing it would allow us to simplify some code. This, we wouldn't need to add them in the AgentConfigurationSchemaCompiler, etc. Deleting a single decorator is easier than going through the whole island code base to remove HARD_CODED_PLUGIN references.

[mssalvatore]

Deleting a single decorator is easier than going through the whole island code base to remove HARD_CODED_PLUGIN references.

I agree, but it would introduce the case where I can ask the repository for all manifests and get a manifest for a plugin that doesn't exist. Theoretically this shouldn't be a problem, but it might be if I use the set of all manifests to query for specific plugins. Then I'll have to handle the case where the plugin doesn't exist. Maybe we'll need to handle that in the long run anyway, I'm not sure.

[mssalvatore]

One small request.