Filter artifact without CVE from top 5 dangerous artifacts (#19187)

Fixes #19186 Signed-off-by: stonezdj <[email protected]>
goharbor · Aug 17, 2023 · d98699b · d98699b
1 parent 0e9fe03
commit d98699b
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/pkg/securityhub/dao/security.go b/src/pkg/securityhub/dao/security.go
@@ -44,6 +44,7 @@ from artifact a,
      scan_report s
 where a.digest = s.digest
   and s.registration_uuid = ?
+  and s.critical_cnt+s.high_cnt+s.medium_cnt+s.low_cnt > 0
 order by s.critical_cnt desc, s.high_cnt desc, s.medium_cnt desc, s.low_cnt desc
 limit 5`