From d98699b5fcc25395b2f911c088166e94660cb6a8 Mon Sep 17 00:00:00 2001
From: "stonezdj(Daojun Zhang)" <stonezdj@gmail.com>
Date: Thu, 17 Aug 2023 09:29:23 +0800
Subject: [PATCH] Filter artifact without CVE from top 5 dangerous artifacts
 (#19187)

Fixes #19186

Signed-off-by: stonezdj <daojunz@vmware.com>
---
 src/pkg/securityhub/dao/security.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/pkg/securityhub/dao/security.go b/src/pkg/securityhub/dao/security.go
index 20495a04d..bc08ce527 100644
--- a/src/pkg/securityhub/dao/security.go
+++ b/src/pkg/securityhub/dao/security.go
@@ -44,6 +44,7 @@ from artifact a,
      scan_report s
 where a.digest = s.digest
   and s.registration_uuid = ?
+  and s.critical_cnt+s.high_cnt+s.medium_cnt+s.low_cnt > 0
 order by s.critical_cnt desc, s.high_cnt desc, s.medium_cnt desc, s.low_cnt desc
 limit 5`