Vulnerabilities status for a package ecosystem

MSAL

Determine the current state of a repository relative to the vulnerabilities in the dependencies of one package ecosystem, as reported by that ecosystem's vulnerability check.

io.moderne.devcenter.PackageVulnerabilityCheck

Required

ecosystemEcosystem

The package ecosystem whose vulnerability report this card reads. The matching DependencyVulnerabilityCheck must run in the same recipe list.

measureString

Choose to report Severity or UpgradeDelta.

Optional

fixableOnlyBoolean

DefaultTrueFalse

Only report vulnerabilities that have a known fix available. By default this is true.

cardNameString

The display name of this DevCenter card, followed by by <measure>. Defaults to <ecosystem> vulnerabilities.

upgradeRecipeString

The id of the recipe DevCenter runs to fix this card's findings. Defaults to the ecosystem's DependencyVulnerabilityCheck.

mod run . --recipe=io.moderne.devcenter.PackageVulnerabilityCheck \
  -P ecosystem=Npm \
  -P measure=Severity

Install it once from Recipe actions, then run it on every repository under the current directory. New to the Moderne CLI? Set it up.