optiopay / klar

Integration of Clair and Docker Registry
MIT License
506 stars 138 forks source link

Severity threshold #41

Closed gdlx closed 7 years ago

gdlx commented 7 years ago

Klar currently allows to filter output by severity and has a threshold by high severity vulnerabilities count.

It would be nice to allow the customization of the threshold level, for example to include Medium vulnerabilities in the threshold count, and return 1 if any.

supereagle commented 7 years ago

If the severity level threshold is set to filter output, all the vulnerabilities outputted are cared by users. I think these outputted vulnerabilities could be counted, and return 1 if the number is larger then the threshold count.

@gauthier-delacroix @hashmap Any comments about this design? If you think it is ok, I can submit a PR for this.

hashmap commented 7 years ago

@supereagle sounds good to me