SCA- Critical Severity

[RahulPidde23]

Test Cases

Case 1

• Create new project with Enable Dependency Scan = true
• Check critical severity count in log -> Ex -> Critical vulnerabilities: 6
• Open Checkmarx tab -> check critical severity count in graph and in report.

Case 2

• Create new project with Enable Dependency Scan = true and Sca critical Threshold =1
• Check critical severity count in log -> Ex -> Critical vulnerabilities: 6
• Scan will fail with error -> SCA critical severity results are above threshold. Results: 6. Threshold: 1
• Open Checkmarx tab -> check critical severity count in graph and in report.Also, check threshold exceeded in red color

Case 3

• Create new project with Enable Dependency Scan = true and Sca critical Threshold =500
• Check critical severity count in log -> Ex -> Critical vulnerabilities: 6
• Scan will successfully completed
• Open Checkmarx tab -> check critical severity count in graph and in report.Also, check Threshold Compliant in green color

Case 4

• Create new project with Enable Dependency Scan = true and Sca critical Threshold =6
• Check critical severity count in log -> Ex -> Critical vulnerabilities: 6
• Scan will successfully completed
• Open Checkmarx tab -> check critical severity count in graph and in report.Also, check Threshold Compliant in green color

Case 5

• Create new project with Enable Dependency Scan = true and Sca critical Threshold =6, Sca High =3, Sca Medium=3, Sca Low = 3
• Check critical\high\medium\low severity count in logs
• Scan will fail with error
  -> SCA critical severity results are above threshold. Results: 6. Threshold: 1
  -> SCA high severity results are above threshold. Results: 26. Threshold: 3
  -> SCA medium severity results are above threshold. Results: 15. Threshold: 3
• Open Checkmarx tab -> check critical\high\medium\low severity count in graph and in report.Also, check threshold exceeded in red color

[sonarqubecloud]

Quality Gate passed

Issues
24 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
43.7% Duplication on New Code

See analysis details on SonarCloud

[ThokalSameer]

Approved