CI integration

[MangoIV]

it would be good to offer a --ci option that does sensible things for running in ci, there would have to be a config file to specify advisories that are not applicable, etc.

• setting a non-zero exit code if warnings occur
• ignore certain advisories

[telser]

@MangoIV Would this include setting a non-zero exitcode? I was just noticing that it is currently 0 even with a vulnerability.

[MangoIV]

Yes, that’s possible! Good idea. For the standard tool I would not do this though.

[telser]

Yes, that’s possible! Good idea. For the standard tool I would not do this though.

Awesome thank you! Some option to fail CI will be great.

[elland]

TODO:

• Allow ignoring specific advisories for a given package and version range
• Specify if finding advisories is a warning or an error with non-zero exit codes so CI steps can fail.
• Define a configuration file schema.

[NorfairKing]

I'd like this!

[MangoIV]

@elland how is this going, should I take over?