From ec84bacfa9f4c9cb7c995ba1008b7d9f2b533172 Mon Sep 17 00:00:00 2001 From: "mend-bolt-for-github[bot]" <42819689+mend-bolt-for-github[bot]@users.noreply.github.com> Date: Wed, 20 Nov 2024 15:21:39 +0000 Subject: [PATCH 1/2] Add .whitesource configuration file --- .whitesource | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 .whitesource diff --git a/.whitesource b/.whitesource new file mode 100644 index 0000000..9c7ae90 --- /dev/null +++ b/.whitesource @@ -0,0 +1,14 @@ +{ + "scanSettings": { + "baseBranches": [] + }, + "checkRunSettings": { + "vulnerableCheckRunConclusionLevel": "failure", + "displayMode": "diff", + "useMendCheckNames": true + }, + "issueSettings": { + "minSeverityLevel": "LOW", + "issueType": "DEPENDENCY" + } +} \ No newline at end of file From 321ccebe35e92be47986d0aee7da86fe6a2298a5 Mon Sep 17 00:00:00 2001 From: jaybuidl Date: Wed, 20 Nov 2024 16:23:10 +0000 Subject: [PATCH 2/2] Update .whitesource --- .whitesource | 17 +++++++++++++---- 1 file changed, 13 insertions(+), 4 deletions(-) diff --git a/.whitesource b/.whitesource index 9c7ae90..57f857d 100644 --- a/.whitesource +++ b/.whitesource @@ -1,6 +1,6 @@ { "scanSettings": { - "baseBranches": [] + "baseBranches": ["dev", "master"] }, "checkRunSettings": { "vulnerableCheckRunConclusionLevel": "failure", @@ -8,7 +8,16 @@ "useMendCheckNames": true }, "issueSettings": { - "minSeverityLevel": "LOW", - "issueType": "DEPENDENCY" + "minSeverityLevel": "MEDIUM", + "issueType": "DEPENDENCY", + "customLabels": ["Type: Security🛡️", "dependencies"], + "assignees": ["jaybuidl"] + }, + "remediateSettings": { + "workflowRules": { + "enabled": true, + "minVulnerabilityScore": 3, + "maxVulnerabilityScore": 10 + } } -} \ No newline at end of file +}