adding Qwiet preZero Static Analysis action workflow config

alanhkarp · May 15, 2024 · 548feae · 548feae
1 parent 5df1f40
commit 548feae
Showing 1 changed file with 15 additions and 0 deletions.
diff --git a/shiftleft.yml b/shiftleft.yml
@@ -0,0 +1,15 @@
+version: 2
+build_rules:
+  - id: Allow no critical findings
+    severities:
+      - critical
+  - id: Allow one OSS or container finding
+    finding_types:
+      - oss_vuln
+      - container
+    threshold: 1
+  - id: Allow no reachable OSS vulnerability
+    finding_types:
+      - oss_vuln
+    options:
+      reachable: true