google / google/osv-scanner

Grace Period Based on Severity

Open
#1,442 1 comment 0 reactions 0 assignees View on GitHub
backlog enhancement
Dominant language
Go
Stars
11k
Forks
792
Avg merge
1d 20h
Merged PRs (30d)
48

Description

It would be nice to allow extend configuration to allow grace period based on severity.

For example something like this:

```toml
[[IgnoredVulns]]
severity = "LOW"
gracePeriod = 180

[[IgnoredVulns]]
severity = "MEDIUM"
gracePeriod = 90

[[IgnoredVulns]]
severity = "HIGH"
gracePeriod = 30
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.