CVSS 4.0 Threshold Recommendation for Risk Acceptance

[seb-kw]

Implement CVSS 4.0 Threshold Recommendation for Automatic Risk Acceptance: As a user, I want to get a suggested CVSS 4.0 threshold value in DevGuard, beyond which a risk is automatically accepted.

[timbastin]

Let's add a new range slider (or integrate in the current reporting range slider). As default, it is turned off. Everything below the threshold is automatically accepted using a predefined justification like "Automatically accepted because risk (or cvss) is below risk acceptance threshold, that was configured by the user

[seb-kw]

Already implemented