From c6ad8d5497c57b3d16b0173f47a250c207050c98 Mon Sep 17 00:00:00 2001 From: Daniel Widdis Date: Fri, 15 Dec 2023 08:22:00 -0800 Subject: [PATCH] Add Mend Remediate for dependency management Signed-off-by: Daniel Widdis --- .whitesource | 30 +++++++++++++++++++++++++++--- 1 file changed, 27 insertions(+), 3 deletions(-) diff --git a/.whitesource b/.whitesource index db4b0fec..a21b0b24 100644 --- a/.whitesource +++ b/.whitesource @@ -5,11 +5,35 @@ "projectToken": "", "baseBranches": [] }, + "scanSettingsSAST": { + "enableScan": false, + "scanPullRequests": false, + "incrementalScan": true, + "baseBranches": [], + "snippetSize": 10 + }, "checkRunSettings": { "vulnerableCheckRunConclusionLevel": "failure", - "displayMode": "diff" + "displayMode": "diff", + "useMendCheckNames": true + }, + "checkRunSettingsSAST": { + "checkRunConclusionLevel": "failure", + "severityThreshold": "high" }, "issueSettings": { - "minSeverityLevel": "LOW" + "minSeverityLevel": "LOW", + "issueType": "DEPENDENCY" + }, + "remediateSettings": { + "enableRenovate": true, + "extends": [ + "config:base", + ":gitSignOff", + "github>whitesource/merge-confidence:beta" + ], + "workflowRules": { + "enabled": true + } } -} \ No newline at end of file +}