anchore / anchore/grant

feat: Adding severity for ruleset

Open
#51 0 comments 1 reaction 0 assignees View on GitHub
feat
Dominant language
Go
Stars
183
Forks
18
Avg merge
3d 7h
Merged PRs (30d)
7

Description

Hi,

Might be a good idea to add a "severity" to each rule (default can be unknown).
can help users to prioritize licenses issues (like with CVEs).

```
rules:
- pattern: "*gpl*"
name: "deny-gpl"
mode: "deny"
reason: "GPL licenses are not allowed per xxx-xx company policy"
severity: "High"
exclusions:
- "alpine-base-layout" # We don't link against this package so we don't care about its license
```

Contributor guide

Open the contributing guide

Research direction

The issue names no files or tests. Start by tracing how the Go project parses rules and reports license issues, using the ruleset example as the target input. Done means rules accept a severity with an unknown default and expose it so users can prioritize findings.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.