Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fail execution when high level vulnerabilities found #5

Open
ubiratansoares opened this issue Sep 18, 2024 · 0 comments
Open

Fail execution when high level vulnerabilities found #5

ubiratansoares opened this issue Sep 18, 2024 · 0 comments

Comments

@ubiratansoares
Copy link
Member

ubiratansoares commented Sep 18, 2024

We can leverage the output in --json format when summarizing results along with jq to query any existing high level vulnerabilities.

That would reflect in the public API of the Github Action. We can shape the API as

  • fail when there are any existing high level vulnerabilities, which translate to a boolean input
  • fail when the number of high level vulnerabilities exceeds a thresholds

Example of json output from scan subcommand

 {
  "url":"https://appsweep.guardsquare.com/builds/483c6dc7-ade3-43e3-a0cb-a52976f25440",
  "high":0,
  "medium":2,
  "low":1
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant