refactor: add warning if severity not from vendor (or NVD or GH) is used

aquasecurity · May 20, 2024 · 4e26d52 · 4e26d52
1 parent ff32deb
commit 4e26d52
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/pkg/vulnerability/vulnerability.go b/pkg/vulnerability/vulnerability.go
@@ -130,6 +130,7 @@ func (c Client) getVendorSeverity(vulnID string, vuln *dbTypes.Vulnerability, so
 		return dbTypes.SeverityUnknown.String(), ""
 	}
 
+	log.Warn("Vendor and NVD don't have severity level. Severity from another vendor is used (see `VendorSeverity` in `json` format).", log.String("CVE", vulnID))
 	return vuln.Severity, ""
 }