Filter only critical / high severity vulnerabilities alerts

[dormullor]

How are you running Renovate?

Self-hosted Renovate

If you're self-hosting Renovate, tell us which platform (GitHub, GitLab, etc) and which version of Renovate.

Github

Please tell us more about your question or problem

At our company, we've started using Renovate, and we’re really impressed with it! One of our key interests is automating PRs to address vulnerabilities. From what I understand, when we enable:

  "vulnerabilityAlerts": {
    "enabled": true
  }

Renovate leverages GitHub security alerts (Dependabot) to identify vulnerabilities and then creates PRs with fixes.
In Dependabot, I can filter PRs to target only Critical or High severity alerts, but this filter doesn’t seem to apply to Renovate.
How can I configure Renovate to ensure it only opens PRs for Critical or High severity alerts?

Logs (if relevant)

Logs

Replace this text with your logs, between the starting and ending triple backticks

[rarkins]

Renovate does not currently parse/store the severity field from alerts. I created #33993 and PRs are welcome