@conterra/vuln-scan 0.0.17 → 0.0.19

package/README.md

@@ -96,11 +96,18 @@ The following sample lists all available options with their default values:
 {
     "$schema": "./node_modules/@conterra/vuln-scan/dist/schema/conf-schema.json",
     
-    /* Defines if the process should fail or only log a warning.
-       If true the process ends with exit code 1 if a vulnerability is detected without a vex information.
-       Otherwise only the log statement "##vso[task.complete result=SucceededWithIssues;]NEW_VULNERABILITIES_DETECTED" is issued.
+    /* Defines if the process should fail or only log a warning or ignore vulnerabilities.
+       If "fail" exit 1 is called.
+       If "warn" the log statement "##vso[task.complete result=SucceededWithIssues;]NEW_VULNERABILITIES_DETECTED" is issued.
+       If "ignore" nothing happens.
     */
-    "failOnNewVulnerabilities": false, 
+    "onNewVulnerabilities": "fail",
+    /* Defines if the process should fail or only log a warning or ignore no longer detected vulnerabilities.
+       If "fail" exit 1 is called.
+       If "warn" the log statement "##vso[task.complete result=SucceededWithIssues;]NO_LONGER_DETECTED_VULNERABILITIES" is issued.
+       If "ignore" nothing happens.
+    */
+    "onNoLongerDetectedVulnerabilities": "ignore", 
     /* The maven repository to fetch sboms from.
        If the maven repository requires authentication, the environment variables MAVEN_REPO_USER and MAVEN_REPO_PW must be set.
     */
@@ -216,6 +223,8 @@ AUTO_REMOVE_UNUSED_STATEMENTS=true
 
 ```
 
+NOTE: This variables can be set in the `.env` file in the root of the project.
+
 For each project following files are created in the `output` folder:
 
 - `<project-name>-<project-version>-sbom.cdx.json`