From 95855ffb26f2a3f1be61f716cc16756d6a06aaf8 Mon Sep 17 00:00:00 2001 From: "whitesource-for-github-com[bot]" <50673670+whitesource-for-github-com[bot]@users.noreply.github.com> Date: Fri, 26 Jun 2020 05:04:47 +0000 Subject: [PATCH 1/2] Add .whitesource configuration file --- .whitesource | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 .whitesource diff --git a/.whitesource b/.whitesource new file mode 100644 index 0000000..60fc783 --- /dev/null +++ b/.whitesource @@ -0,0 +1,13 @@ +{ + "scanSettings": { + "configMode": "AUTO", + "configExternalURL": "", + "projectToken" : "" + }, + "checkRunSettings": { + "vulnerableCheckRunConclusionLevel": "failure" + }, + "issueSettings": { + "minSeverityLevel": "LOW" + } +} \ No newline at end of file From d27ecfa6d1a232f6c919eb4a4f7462d3fc41d062 Mon Sep 17 00:00:00 2001 From: hf-security <60392618+hf-security@users.noreply.github.com> Date: Fri, 26 Jun 2020 07:19:52 +0200 Subject: [PATCH 2/2] [IS-779](https://hellofresh.atlassian.net/browse/IS-779) - Disable GitHub issue creation In order to avoid spamming the GitHub repository with issues regarding possible security vulnerabilities and to integrate probably within the HelloFresh project management. The GitHub issue creation is disabled as per the [whitesource documentation](https://whitesource.atlassian.net/wiki/spaces/WD/pages/697696422/WhiteSource+for+GitHub.com#WhiteSourceforGitHub.com-IssueSettings(issueSettings)) --- .whitesource | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.whitesource b/.whitesource index 60fc783..f15f2cf 100644 --- a/.whitesource +++ b/.whitesource @@ -5,9 +5,9 @@ "projectToken" : "" }, "checkRunSettings": { - "vulnerableCheckRunConclusionLevel": "failure" + "vulnerableCheckRunConclusionLevel": "success" }, "issueSettings": { - "minSeverityLevel": "LOW" + "minSeverityLevel": "NONE" } -} \ No newline at end of file +}