From 79b7b101b8cc41b28ff990602b944843d7b8a875 Mon Sep 17 00:00:00 2001 From: iuriikogan Date: Tue, 24 Sep 2024 18:31:26 +0300 Subject: [PATCH] update snyk-filter; --- .snyk-filter/snyk.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.snyk-filter/snyk.yml b/.snyk-filter/snyk.yml index 7ad1d8f1..91edf94b 100644 --- a/.snyk-filter/snyk.yml +++ b/.snyk-filter/snyk.yml @@ -1,5 +1,5 @@ version: 2 customFilters: - filter: ".vulnerabilities |= map(if .isUpgradable == true and .severity != \"low\" then . else empty end)" - pass: "[.vulnerabilities[] | select(.severity != \"low\" and .isUpgradable == true)] | length" - msg: "Medium or above severity & upgradeable vulns found. Please review upgrade steps" \ No newline at end of file + filter: ".vulnerabilities |= map(if .cvssScore >= 9 then . else empty end)" + pass: "[.vulnerabilities[] | select(.cvssScore >= 9)] | length" + msg: "Vulnerabilities with CVSS Score of 9+ found" \ No newline at end of file