Filter artifact without CVE from top 5 dangerous artifacts (#19187)

Fixes #19186 Signed-off-by: stonezdj <daojunz@vmware.com>
2023-08-17 09:29:23 +08:00 · 2023-08-17 09:29:23 +08:00 · d98699b5fc
parent 0e9fe03e54
commit d98699b5fc
1 changed files with 1 additions and 0 deletions
--- a/src/pkg/securityhub/dao/security.go
+++ b/src/pkg/securityhub/dao/security.go
@ -44,6 +44,7 @@ from artifact a,
     scan_report s
 where a.digest = s.digest
  and s.registration_uuid = ?
+  and s.critical_cnt+s.high_cnt+s.medium_cnt+s.low_cnt > 0
 order by s.critical_cnt desc, s.high_cnt desc, s.medium_cnt desc, s.low_cnt desc
 limit 5`