finos / spring-bot

Spring Boot + Java Integration for Symphony/Teams Chat Platform Bots and Apps
https://springbot.finos.org
Apache License 2.0
60 stars 35 forks source link

Disable GitHub Issues notification of CVEs #99

Closed maoo closed 3 years ago

maoo commented 4 years ago

See https://finosfoundation.atlassian.net/wiki/spaces/FINOS/pages/1230176257/Security+Vulnerabilities+Responsible+Disclosure+Policy

@robmoffat - feel free to email help@finos.org with email addresses of devs that need access to the WhiteSource dashboard and need to be notified about new CVEs. TY!

robmoffat commented 3 years ago

I already have a LOW issue that is impossible for me to close, since it's part of the maven plugin tooling. (I guess I could add some weird exclude rule but ugh). Therefore, I'm not sure I want to reduce the level still further, and increase the number of white source issues.

Isn't that what this change will do ?

cheers, Rob