From adec2e6d120de7652402748b54e7483573c04c6f Mon Sep 17 00:00:00 2001 From: "whitesource-for-github-com[bot]" <50673670+whitesource-for-github-com[bot]@users.noreply.github.com> Date: Fri, 26 Jun 2020 05:18:45 +0000 Subject: [PATCH 1/2] Add .whitesource configuration file --- .whitesource | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 .whitesource diff --git a/.whitesource b/.whitesource new file mode 100644 index 0000000..60fc783 --- /dev/null +++ b/.whitesource @@ -0,0 +1,13 @@ +{ + "scanSettings": { + "configMode": "AUTO", + "configExternalURL": "", + "projectToken" : "" + }, + "checkRunSettings": { + "vulnerableCheckRunConclusionLevel": "failure" + }, + "issueSettings": { + "minSeverityLevel": "LOW" + } +} \ No newline at end of file From 8a5205ad06321d6290d85057aa6c5201a72a7763 Mon Sep 17 00:00:00 2001 From: hf-security <60392618+hf-security@users.noreply.github.com> Date: Fri, 26 Jun 2020 07:20:15 +0200 Subject: [PATCH 2/2] [IS-779](https://hellofresh.atlassian.net/browse/IS-779) - Disable GitHub issue creation In order to avoid spamming the GitHub repository with issues regarding possible security vulnerabilities and to integrate probably within the HelloFresh project management. The GitHub issue creation is disabled as per the [whitesource documentation](https://whitesource.atlassian.net/wiki/spaces/WD/pages/697696422/WhiteSource+for+GitHub.com#WhiteSourceforGitHub.com-IssueSettings(issueSettings)) --- .whitesource | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.whitesource b/.whitesource index 60fc783..f15f2cf 100644 --- a/.whitesource +++ b/.whitesource @@ -5,9 +5,9 @@ "projectToken" : "" }, "checkRunSettings": { - "vulnerableCheckRunConclusionLevel": "failure" + "vulnerableCheckRunConclusionLevel": "success" }, "issueSettings": { - "minSeverityLevel": "LOW" + "minSeverityLevel": "NONE" } -} \ No newline at end of file +}