From bc40bbb3e603460850a561b8e5f2c504ac64371c Mon Sep 17 00:00:00 2001 From: "whitesource-for-github-com[bot]" <50673670+whitesource-for-github-com[bot]@users.noreply.github.com> Date: Fri, 26 Jun 2020 05:03:01 +0000 Subject: [PATCH 1/2] Add .whitesource configuration file --- .whitesource | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 .whitesource diff --git a/.whitesource b/.whitesource new file mode 100644 index 0000000..60fc783 --- /dev/null +++ b/.whitesource @@ -0,0 +1,13 @@ +{ + "scanSettings": { + "configMode": "AUTO", + "configExternalURL": "", + "projectToken" : "" + }, + "checkRunSettings": { + "vulnerableCheckRunConclusionLevel": "failure" + }, + "issueSettings": { + "minSeverityLevel": "LOW" + } +} \ No newline at end of file From af59016f2b7cf90912ce51e2efbc31b1cfb768e6 Mon Sep 17 00:00:00 2001 From: hf-security <60392618+hf-security@users.noreply.github.com> Date: Fri, 26 Jun 2020 07:18:24 +0200 Subject: [PATCH 2/2] [IS-779](https://hellofresh.atlassian.net/browse/IS-779) - Disable GitHub issue creation In order to avoid spamming the GitHub repository with issues regarding possible security vulnerabilities and to integrate probably within the HelloFresh project management. The GitHub issue creation is disabled as per the [whitesource documentation](https://whitesource.atlassian.net/wiki/spaces/WD/pages/697696422/WhiteSource+for+GitHub.com#WhiteSourceforGitHub.com-IssueSettings(issueSettings)) --- .whitesource | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.whitesource b/.whitesource index 60fc783..f15f2cf 100644 --- a/.whitesource +++ b/.whitesource @@ -5,9 +5,9 @@ "projectToken" : "" }, "checkRunSettings": { - "vulnerableCheckRunConclusionLevel": "failure" + "vulnerableCheckRunConclusionLevel": "success" }, "issueSettings": { - "minSeverityLevel": "LOW" + "minSeverityLevel": "NONE" } -} \ No newline at end of file +}