From 41d3ba993cfcaedb38b814cd84e025fae54ab9ba Mon Sep 17 00:00:00 2001 From: "mend-for-github-com[bot]" <50673670+mend-for-github-com[bot]@users.noreply.github.com> Date: Fri, 16 Aug 2024 15:26:26 +0000 Subject: [PATCH 1/2] Add .whitesource configuration file --- .whitesource | 45 +++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 45 insertions(+) create mode 100644 .whitesource diff --git a/.whitesource b/.whitesource new file mode 100644 index 0000000000000..04109aad18f06 --- /dev/null +++ b/.whitesource @@ -0,0 +1,45 @@ +{ + "scanSettings": { + "configMode": "AUTO", + "configExternalURL": "", + "projectToken": "", + "baseBranches": [] + }, + "scanSettingsSAST": { + "enableScan": true, + "scanPullRequests": true, + "incrementalScan": true, + "baseBranches": [], + "snippetSize": 10 + }, + "checkRunSettings": { + "vulnerableCheckRunConclusionLevel": "failure", + "displayMode": "diff", + "useMendCheckNames": true + }, + "checkRunSettingsSAST": { + "checkRunConclusionLevel": "failure", + "severityThreshold": "high" + }, + "issueSettings": { + "minSeverityLevel": "LOW", + "issueType": "DEPENDENCY" + }, + "issueSettingsSAST": { + "minSeverityLevel": "high", + "issueType": "repo" + }, + "remediateSettings": { + "workflowRules": { + "enabled": true + } + }, + "imageSettings":{ + "imageTracing":{ + "enableImageTracingPR": false, + "addRepositoryCoordinate": false, + "addDockerfilePath": false, + "addMendIdentifier": false + } + } +} \ No newline at end of file From 99147f86056fd1b0969c3d7d6d84e2bc56bfa9dd Mon Sep 17 00:00:00 2001 From: shaneclarke-whitesource <64655166+shaneclarke-whitesource@users.noreply.github.com> Date: Fri, 16 Aug 2024 11:29:08 -0400 Subject: [PATCH 2/2] Update .whitesource --- .whitesource | 13 +++++++++++-- 1 file changed, 11 insertions(+), 2 deletions(-) diff --git a/.whitesource b/.whitesource index 04109aad18f06..314ae2a31adb7 100644 --- a/.whitesource +++ b/.whitesource @@ -32,7 +32,16 @@ "remediateSettings": { "workflowRules": { "enabled": true - } + }, + "enableRenovate": true, + "extends": [ + "config:base", + "mergeConfidence:all-badges", + "github>mend-toolkit/mend-examples//Repo-Integration/Renovate/smart-merge" + ] + }, + "leastVulnerablePackageSettings": { + "enabled": true }, "imageSettings":{ "imageTracing":{ @@ -42,4 +51,4 @@ "addMendIdentifier": false } } -} \ No newline at end of file +}