l3montree-dev/devguard

Clarify dependency vulnerability issue creation thresholds

Chiusa

#2609 aperta il 22 lug 2026

 (0 commenti) (0 reazioni) (1 assegnatario)Go (32 fork)auto 404
bugcomponent/devguard-webgood first issue

Metriche repository

Star
 (144 stelle)
Metriche merge PR
 (Metriche PR in attesa)

Descrizione

The Reporting section in Asset Settings provides CVSS and Risk Value thresholds for automatic dependency vulnerability issue creation.

We need to clarify that an issue is created if either the CVSS or the Risk Value threshold is exceeded (OR logic), not only if both thresholds are exceeded.

Guida contributor