From 4d7b19c3b0f140548891ad3b6be92b640d203161 Mon Sep 17 00:00:00 2001 From: Alexis-Maurer Fortin Date: Fri, 23 May 2025 14:30:25 +0200 Subject: [PATCH 1/2] require full repo and filter for only high severity results --- scanners/boostsecurityio/malcontent/module.yaml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/scanners/boostsecurityio/malcontent/module.yaml b/scanners/boostsecurityio/malcontent/module.yaml index e0d54d04..8a913229 100644 --- a/scanners/boostsecurityio/malcontent/module.yaml +++ b/scanners/boostsecurityio/malcontent/module.yaml @@ -8,16 +8,17 @@ scan_types: config: support_diff_scan: true + require_full_repo: true steps: - scan: command: docker: image: cgr.dev/chainguard/malcontent:latest - command: --format=json --min-risk=medium analyze . + command: --format=json --min-risk=high analyze . workdir: /src format: sarif post-processor: docker: - image: public.ecr.aws/boostsecurityio/boost-scanner-malcontent:0a559cb@sha256:dc4d24ab8bd8f0e90e9c789cb3700065491232563e9451a9829443ab123e915e + image: public.ecr.aws/boostsecurityio/boost-scanner-malcontent:cbbe409@sha256:8e0e0b25e8302c5c64fe34abe398802afacc1a00f93248e62f7757c8bb45af98 command: process From cd23469a16168f542a97b2d5a89c29c460bce705 Mon Sep 17 00:00:00 2001 From: Alexis-Maurer Fortin Date: Fri, 23 May 2025 16:04:17 +0200 Subject: [PATCH 2/2] latest --- scanners/boostsecurityio/malcontent/module.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scanners/boostsecurityio/malcontent/module.yaml b/scanners/boostsecurityio/malcontent/module.yaml index 8a913229..0ed09c18 100644 --- a/scanners/boostsecurityio/malcontent/module.yaml +++ b/scanners/boostsecurityio/malcontent/module.yaml @@ -20,5 +20,5 @@ steps: format: sarif post-processor: docker: - image: public.ecr.aws/boostsecurityio/boost-scanner-malcontent:cbbe409@sha256:8e0e0b25e8302c5c64fe34abe398802afacc1a00f93248e62f7757c8bb45af98 + image: public.ecr.aws/boostsecurityio/boost-scanner-malcontent:ea4c635@sha256:b6f1cae9301aacac4d2256d260aa1a58c38f4683b06c518fb11208fa16eb2f3b command: process