Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

feat(vulnerabilities): add option to add summary to dashboard #21766

Merged
merged 14 commits into from May 17, 2023
Merged

feat(vulnerabilities): add option to add summary to dashboard #21766

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
14 commits
Select commit Hold shift + click to select a range
0128313
feat(vulnerabilities): add option to add summary to dashboard
secustor Apr 23, 2023
e739451
feat(vulnerabilities): rename option to dependencyDashboardOSVVulnera…
secustor Apr 23, 2023
6a0764c
Merge branch 'main' into feat/add_unfixed_CVEs_to_dashboards
secustor Apr 23, 2023
dba610e
docs(vulnerabilities): implement doc suggestions
secustor Apr 27, 2023
1448063
Update lib/config/options/index.ts
secustor Apr 28, 2023
a6d3279
Merge branch 'main' into feat/add_unfixed_CVEs_to_dashboards
secustor Apr 28, 2023
a320036
fix tests
secustor Apr 29, 2023
ed5d5f9
Apply suggestions from code review
secustor Apr 29, 2023
ac38b6c
fix tests and implement suggestions
secustor Apr 29, 2023
1c02843
docs(vulnerabilities): clarify that the new option is not connected t…
secustor May 7, 2023
ce1712c
Apply suggestions from code review
secustor May 8, 2023
8da0435
Update docs/usage/configuration-options.md
secustor May 8, 2023
4589467
chore: reword vulnerability text and reference osvVulnerabilityAlerts
secustor May 16, 2023
b0348d5
Merge branch 'main' into feat/add_unfixed_CVEs_to_dashboards
secustor May 16, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
12 changes: 7 additions & 5 deletions docs/usage/configuration-options.md
View file
Open in desktop
Expand Up @@ -704,13 +704,15 @@ Configure this option if you prefer a different title for the Dependency Dashboa

## dependencyDashboardOSVVulnerabilitySummary
secustor marked this conversation as resolved.
Show resolved Hide resolved

Set this function to control if a summary of the CVEs affected should be added to the dependency dashboard.
Use this option to control if the Dependency Dashboard should have a section that shows the CVEs for your repository.
secustor marked this conversation as resolved.
Show resolved Hide resolved
secustor marked this conversation as resolved.
Show resolved Hide resolved

Available options are:
The source of these CVEs is [OSV.dev](https://osv.dev/).

- `none` ( default ) no section will be added.
- `unresolved` only vulnerabilities will be added if there are no fixes available.
- `all` list all vulnerabilities which affect this repository.
You can choose from:

- `none` (default) no section will be added
secustor marked this conversation as resolved.
Show resolved Hide resolved
- `unresolved` show vulnerabilities that have no fixes
secustor marked this conversation as resolved.
Show resolved Hide resolved
- `all` list all vulnerabilities
secustor marked this conversation as resolved.
Show resolved Hide resolved

## description

Expand Down
3 changes: 1 addition & 2 deletions lib/config/options/index.ts
View file
Open in desktop
Expand Up @@ -522,8 +522,7 @@ const options: RenovateOptions[] = [
},
{
name: 'dependencyDashboardOSVVulnerabilitySummary',
description:
'These labels will always be applied on the Dependency Dashboard issue, even when they have been removed manually.',
description: 'Set this option to display CVEs affecting dependencies.',
secustor marked this conversation as resolved.
Show resolved Hide resolved
type: 'string',
allowedValues: ['none', 'all', 'unresolved'],
default: 'none',
Expand Down