Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Configure WhiteSource for GitHub.com #121

Merged
merged 2 commits into from
Jun 26, 2020
Merged

Conversation

mend-for-cf-workers-proxy-enn.pages.dev[bot]
Copy link
Contributor

Welcome to WhiteSource for GitHub.com! This is an onboarding PR to help you understand and configure settings before WhiteSource starts scanning your repository for security vulnerabilities.

🚦 WhiteSource for GitHub.com will start scanning your repository only once you merge this Pull Request. To disable WhiteSource for GitHub.com, simply close this Pull Request.


What to Expect

This PR contains a '.whitesource' configuration file which can be customized to your needs. If no changes were applied to this file, WhiteSource for GitHub.com will use the default configuration.

Before merging this PR, Make sure the Issues tab is enabled. Once you merge this PR, WhiteSource for GitHub.com will scan your repository and create a GitHub Issue for every vulnerability detected in your repository.

If you do not want a GitHub Issue to be created for each detected vulnerability, you can edit the '.whitesource' file and set the 'minSeverityLevel' parameter to 'NONE'.

If WhiteSource Remediate Workflow Rules are set on your repository (from the WhiteSource 'Integrate' tab), WhiteSource will also generate a fix Pull Request for relevant vulnerabilities.


❓ Got questions? Check out WhiteSource for GitHub.com docs.
If you need any further assistance then you can also request help here.

@codecov
Copy link

codecov bot commented Jun 26, 2020

Codecov Report

Merging #121 into master will not change coverage.
The diff coverage is n/a.

Impacted file tree graph

@@           Coverage Diff           @@
##           master     #121   +/-   ##
=======================================
  Coverage   42.72%   42.72%           
=======================================
  Files           8        8           
  Lines         316      316           
=======================================
  Hits          135      135           
  Misses        174      174           
  Partials        7        7           

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 9d70451...4824633. Read the comment docs.

…tHub issue creation

In order to avoid spamming the GitHub repository with issues regarding possible 
security vulnerabilities and to integrate probably within the HelloFresh project management.
The GitHub issue creation is disabled as per the [whitesource documentation](https://whitesource.atlassian.net/wiki/spaces/WD/pages/697696422/WhiteSource+for+GitHub.com#WhiteSourceforGitHub.com-IssueSettings(issueSettings))
@awurster
Copy link
Contributor

awurster commented Jun 26, 2020

👍

Approved with Zappr Approved with Zappr Approved with Zappr Approved with Zappr Approved with Zappr

Copy link
Contributor

@awurster awurster left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

approval from hf-security bot

@ghost
Copy link

ghost commented Jun 26, 2020

👍

Approved with Zappr Approved with Zappr Approved with Zappr Approved with Zappr Approved with Zappr

@ghost
Copy link

ghost commented Jun 26, 2020

👍

@vgarvardt vgarvardt merged commit ce951ba into master Jun 26, 2020
@vgarvardt vgarvardt deleted the whitesource/configure branch June 26, 2020 13:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants