Skip to content

Commit

Permalink
Update CVSS threshold
Browse files Browse the repository at this point in the history
Up until now, a CVSS threshold of 9.0 was specified, which meant that it
practically never triggers. Especially with the introduction of dependabot
it is important to keep an eye on vulnerabilities.
  • Loading branch information
AntonOellerer committed Sep 30, 2021
1 parent e21a524 commit 7393b7e
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions build.gradle
Original file line number Diff line number Diff line change
Expand Up @@ -69,8 +69,8 @@ test {

dependencyCheck {
format = 'ALL'
junitFailOnCVSS = 7.0
failBuildOnCVSS = 9.0
junitFailOnCVSS = 6.0
failBuildOnCVSS = 6.0
suppressionFile = 'config/dependency-check/suppression.xml'
}
tasks.withType(Checkstyle) {
Expand Down

0 comments on commit 7393b7e

Please sign in to comment.