-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathrenovate.json
46 lines (46 loc) · 1.65 KB
/
renovate.json
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
{
"branchPrefix": "whitesource-remediate/",
"includeForks": true,
"onboarding": false,
"requireConfig": "optional",
"extends": [
"github>whitesource/merge-confidence:beta"
],
"packageRules": [
{
"matchPackagePatterns": [
"*"
],
"enabled": false
},
{
"matchDatasources": [
"pypi"
],
"matchPackageNames": [
"python-multipart"
],
"matchCurrentVersion": "==0.0.5",
"allowedVersions": ">= 0.0.7",
"vulnerabilityAlert": true,
"enabled": true,
"ignoreUnstable": false,
"groupName": null,
"schedule": [],
"dependencyDashboardApproval": false,
"labels": [
"security fix"
],
"prBodyTemplate": "{{{table}}}{{{notes}}}{{{changelogs}}}{{{controls}}}",
"prBodyNotes": [
"By merging this PR, the issue #2 will be automatically resolved and closed:\n\n| Severity | <a href='#'><img src='https://whitesource-resources.whitesourcesoftware.com/cvss3.png' width='19' height='20'></a> CVSS Score |CVE |\n|---|---|---|\n| ![High](https://whitesource-resources.whitesourcesoftware.com/high_vul_bb.png?) High | 7.5 | [CVE-2024-24762](https://www.mend.io/vulnerability-database/CVE-2024-24762) |\n<!--[REMEDIATE_ANALITICS]{\"libraryData\":{\"libraryName\":\"python-multipart\",\"libraryVersion\":\"0.0.5\",\"libraryFixVersion\":\"0.0.7\",\"libraryArtifactId\":\"python-multipart\",\"language\":\"Python\"},\"vulnerabilityData\":[{\"severity\":\"High\",\"score\":\"7.5\",\"vulnerabilityId\":\"CVE-2024-24762\"}]}[/REMEDIATE_ANALITICS]-->"
],
"isVulnerabilityAlert": true,
"commitMessageSuffix": "",
"suppressNotifications": [
"prIgnoreNotification",
"prEditNotification"
]
}
]
}