Skip to content

Adjust blog post sorting

Steve Abrams requested to merge delivery19745-todo-severity into master

What does this MR do and why?

This makes a few small adjustments to the security blog post:

  • Adjust issue sorting so a cvss base score of 0 is seen as higher than when there is no CVE issue at all.

  • Display 'TODO' when the CVE severity is 'None' so AppSec is flagged to adjust the post since an issue with None means a cvss base score of 0, which is not expected.

Related to gitlab-com/gl-infra/delivery#19745 (closed) and gitlab-com/gl-infra/delivery#19741 (closed)

Author Check-list

  • [-] Has documentation been updated?

Merge request reports