ods-jenkins-shared-library icon indicating copy to clipboard operation
ods-jenkins-shared-library copied to clipboard

Published 20 hours ago • verified publisher icon opendevstack

Wrong Documentation around Snyk

Open sino92 opened this issue 3 years ago • 1 comments

Is your feature request related to a problem? Please describe. --severity-threshold flag not doing what it's promising it should do. On the ODS docs, it says

Severity threshold for failing. If any found vulnerability has a severity equal or 
higher to the threshold, the snyk test will return with a failure status...

whereas on Snyk documentation we have: --severity-threshold: Only report vulnerabilities of provided level or higher.

ODS Version: 3.x and on

sino92 avatar Jun 09 '21 08:06 sino92

Hi @sino92! Could you elaborate a bit more what the issue is? For me they read the same, just with the difference that we let the pipeline in which the scan happens fail additionally based on the reported vulns.

renedupont avatar Oct 13 '21 11:10 renedupont