Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Github Reusable Workflow - being able to fail to job by a minimum severity #712

Open
fingeromer opened this issue Dec 18, 2023 · 1 comment
Open

Github Reusable Workflow - being able to fail to job by a minimum severity #712

fingeromer opened this issue Dec 18, 2023 · 1 comment
Labels
enhancement New feature or request

Comments

@fingeromer
Copy link

fingeromer commented Dec 18, 2023 •
edited

Hi, is there a way to set a minimum CVSS for failing the reusable PR scanner workflow?
For example, new package with CVE of 2.1 CVSS, only print log, but won't fail the step.
@oliverchang
Copy link
Collaborator

Extending on this, it might make sense to keep this consistent with the prioritisation mechanisms for guided remediation: #352

  • minimum severity
  • maximum dependency depth
  • dev vs non dev

@oliverchang oliverchang added the enhancement New feature or request label Dec 18, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@oliverchang @fingeromer