Fix: Excluded threat IDs are ignored when using --exclude argument #174
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Hi,
the
--exclude
argument does not have any effect on the output/reports.I could not find any related issue/pull request so far.
Example:
python tm.py --exclude DR01,DS06 --report template.md > report.md
(This should remove the threats Unprotected Sensitive Data and Data Leak from the list of threats at the sample TM)
The attribute _threatsExcluded are set when parsing arguments, but were not used after that.
This was fixed with a simple if-statement when adding threats to the output/report.
However, this also required the argument parsing of excluded threats to be moved further up. Otherwise, reports/output would have been processed before threats are even added to the list of excluded threats as it seems.