bitbucket-dependency-scanner: Can you generate a code insights report when the scan fails

[Rik Overvelde]

Hello,

I'm configuring the bitbucket-dependency-scanner in a pipeline. I'd like the pipeline to fail when a dependency with a CVSS score of 7 or higher is found. 

Normally, the dependency scanner generates annotations for a code insight report after finishing the scan. However, if I add the EXTRA_ARGS: --failOnCVSS=7 option (according to the examples) the scanner fails before the annotations are generated.

I'd like to have the report available as well if the step fails. Is this possible?

[Igor Stoyanov]

Hi @Rik Overvelde . Thanks for your suggestion.

We will investigate this and notify you when new pipe version will become available.

Regards, Igor

[Rik Overvelde]

Thanks for the answer! For now it's not a major issue but it would be a nice improvement.