feat: add --vuln-severity-source flag to customize vulnerability severity selection
#8180
Comments
This was referenced Jan 21, 2025
--severity-src flag to customize vulnerability severity selection--severity-source flag to customize vulnerability severity selection
--severity-source flag to customize vulnerability severity selection--vuln-severity-source flag to customize vulnerability severity selection
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Description
Currently, Trivy automatically selects the "best" severity among multiple data sources (NVD, GHSA, etc.) based on its internal logic. While this works well for most cases, some users have specific needs for severity selection:
To address these needs, I propose adding a new
--vuln-severity-sourceflag that allows users to specify their preferred severity sources in order of priority.Proposed Implementation
The flag would work as follows:
Accept multiple values in comma-separated format or repeated flags
Example:
--vuln-severity-source nvd --vuln-severity-source ghsaProcess severity sources in the specified order
Define current behavior as
autoautoAllow fallback to auto mode
Example:
--vuln-severity-source nvd,autoUsage Examples
Benefits
The text was updated successfully, but these errors were encountered: