Hi,

I'm looking for a way to control the behavior of unfixed vulnerabilities. Now the only way to do this is to use json or openvex as output format and pre-analyse the results.

I am thinking of a new command flag:

  • --exit-code-on-unfixed specify exit code when only unfixed security issues are found
  • --ignore-unfixed only shows fixed vulnerabilities

What is your opinion on this?

Regards

Comment From: mrkfrmn

CC @golang/vulndb from owners.