mirror of
https://github.com/elicpeter/nyx.git
synced 2026-06-09 19:45:13 +02:00
fix(cli): apply repository triage file during scans
This commit is contained in:
parent
991c84a1eb
commit
1148e65f36
42 changed files with 571 additions and 20 deletions
|
|
@ -82,6 +82,13 @@ nyx scan [PATH] [OPTIONS]
|
|||
| `--rollup-examples <N>` | `5` | Number of example locations in rollup findings |
|
||||
| `--show-instances <RULE>` | *(none)* | Expand all instances of a specific rule (bypass rollup) |
|
||||
|
||||
`nyx scan` automatically reads `.nyx/triage.json` from the scan root when the
|
||||
file exists. Terminal triage states written by `nyx serve` (`false_positive`,
|
||||
`accepted_risk`, `suppressed`, and `fixed`) are hidden from CLI output and do
|
||||
not trigger `--fail-on` by default. Use `--show-suppressed` to include them in
|
||||
console, JSON, or SARIF output with their `triage_state` and optional
|
||||
`triage_note`.
|
||||
|
||||
**Severity expression formats**:
|
||||
|
||||
```bash
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue