From 67fe87ed806c247e33e11507029e75a53650581d Mon Sep 17 00:00:00 2001 From: "whitesource-for-github-com[bot]" <50673670+whitesource-for-github-com[bot]@users.noreply.github.com> Date: Fri, 26 Jun 2020 05:04:12 +0000 Subject: [PATCH 1/2] Add .whitesource configuration file --- .whitesource | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 .whitesource diff --git a/.whitesource b/.whitesource new file mode 100644 index 0000000..60fc783 --- /dev/null +++ b/.whitesource @@ -0,0 +1,13 @@ +{ + "scanSettings": { + "configMode": "AUTO", + "configExternalURL": "", + "projectToken" : "" + }, + "checkRunSettings": { + "vulnerableCheckRunConclusionLevel": "failure" + }, + "issueSettings": { + "minSeverityLevel": "LOW" + } +} \ No newline at end of file From 732d8fe6c61f7cbbdc45d60b87cfb0f6e8c0900c Mon Sep 17 00:00:00 2001 From: hf-security <60392618+hf-security@users.noreply.github.com> Date: Fri, 26 Jun 2020 07:19:24 +0200 Subject: [PATCH 2/2] [IS-779](https://hellofresh.atlassian.net/browse/IS-779) - Disable GitHub issue creation In order to avoid spamming the GitHub repository with issues regarding possible security vulnerabilities and to integrate probably within the HelloFresh project management. The GitHub issue creation is disabled as per the [whitesource documentation](https://whitesource.atlassian.net/wiki/spaces/WD/pages/697696422/WhiteSource+for+GitHub.com#WhiteSourceforGitHub.com-IssueSettings(issueSettings)) --- .whitesource | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.whitesource b/.whitesource index 60fc783..f15f2cf 100644 --- a/.whitesource +++ b/.whitesource @@ -5,9 +5,9 @@ "projectToken" : "" }, "checkRunSettings": { - "vulnerableCheckRunConclusionLevel": "failure" + "vulnerableCheckRunConclusionLevel": "success" }, "issueSettings": { - "minSeverityLevel": "LOW" + "minSeverityLevel": "NONE" } -} \ No newline at end of file +}