Skip to content

"No vulnerabilities found" message when using only-fixed: true #527

@chrisbloe

Description

@chrisbloe

When using the only-fixed: true flag, if vulnerabilities are found, but ignored, the log message states...

No vulnerabilities found

...which implies there are no vulnerability concerns.

However, iff vulnerabilities are found and ignored, a more accurate message would be...

No vulnerabilities (that have a fix available) found

... as this wording matches the documentation for the only-fixed flag.

Please could this wording change be considered 👍.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    Status

    Ready

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions