l3montree-dev/devguard

Clarify dependency vulnerability issue creation thresholds

已关闭

#2,609 创建于 2026年7月22日

 (0 条评论) (0 个反应) (1 位负责人)Go (32 个派生)auto 404
bugcomponent/devguard-webgood first issue

仓库指标

星标
 (144 个星标)
PR 合并指标
 (PR 指标待抓取)

描述

The Reporting section in Asset Settings provides CVSS and Risk Value thresholds for automatic dependency vulnerability issue creation.

We need to clarify that an issue is created if either the CVSS or the Risk Value threshold is exceeded (OR logic), not only if both thresholds are exceeded.

贡献者指南