How to get issues by specific severity level. eg- Critical, High

[Aliraza-Gulamali]

I have so many issues coming up after successful TfSec scan, Now, want to filter the results based on the severity and configure further TfSec Scan only for Critical and High Severity issues and ignoring rest of the severity issues.

Is it possible to get issue based on specific severity eg- Critical, High ?
If yes, how I can achieve this. is there any parameters / arguments available to do this.

[mijdavis2]

You can sort, but AFAIK you can't filter the output based on severity. You can be explicit about rule includes and excludes, tho, via --include and --exclude options. The --help arg has solid docs on cli options.

[liamg]

You can use the --minimum-severity parameter to only show results above a certain severity e.g.

tfsec --minimum-severity CRITICAL

[zoro16]

You can run the following command:

tfsec . | grep -A 20 CRITICAL

Where -A is refering to the number of lines after the line that includes CRITICAL. And you can change CRITICAL to the severity you are looking for e.g. HIGH .

[zoro16]