bitbucket-dependency-scanner: Can you generate a code insights report when the scan fails

Question

Hello,

I'm configuring the bitbucket-dependency-scanner in a pipeline. I'd like the pipeline to fail when a dependency with a CVSS score of 7 or higher is found.

Normally, the dependency scanner generates annotations for a code insight report after finishing the scan. However, if I add the EXTRA_ARGS: --failOnCVSS=7 option (according to the examples) the scanner fails before the annotations are generated.

I'd like to have the report available as well if the step fails. Is this possible?

Rik Overvelde · Answer

Thanks for the answer! For now it's not a major issue but it would be a nice improvement.

Igor Stoyanov · Answer

Hi @Rik Overvelde . Thanks for your suggestion.

We will investigate this and notify you when new pipe version will become available.

Regards, Igor