Fix bug score undefined

koumoul-dev · Jul 31, 2023 · 2eb8b2f · 2eb8b2f
1 parent bbc8f62
commit 2eb8b2f
Showing 1 changed file with 6 additions and 5 deletions.
diff --git a/app.js b/app.js
@@ -51,22 +51,23 @@ const runAllScans = async () => {
         for (const vulnerability of vulnerabilities) {
           for (const container of containers.filter(container => container.image === scanTarget.name)) {
             container.name[0] = container.name[0].replace('/', '')
-            const v2Scores = Object.values(vulnerability.CVSS).map(item => item.V2Score).filter(score => score !== undefined)
-            const v3Scores = Object.values(vulnerability.CVSS).map(item => item.V3Score).filter(score => score !== undefined)
+            const v2Scores = Object.values(vulnerability.CVSS || {}).map(item => item.V2Score).filter(score => score !== undefined)
+            const v3Scores = Object.values(vulnerability.CVSS || {}).map(item => item.V3Score).filter(score => score !== undefined)
             const allScores = v2Scores.concat(v3Scores)
             const maxScore = Math.max(...allScores)
             console.log('--->', vulnerability.VulnerabilityID, maxScore, allScores, v2Scores, v3Scores)
-            gaugeVulnerabilityID.set({
+            const labels = {
               container_name: container.name,
               severity: vulnerability.Severity,
               image_registry: imageRef.domain || 'index.docker.io',
               image_repository: imageRef.repository,
               image_tag: imageRef.tag,
               namespace: process.env.VM_NAME || 'trivy-exporter',
               vuln_id: vulnerability.VulnerabilityID,
-              vuln_score: maxScore,
               vuln_title: vulnerability.Title
-            }, 0)
+            }
+            if (maxScore > 0) labels.vuln_score = maxScore
+            gaugeVulnerabilityID.set(labels, 0)
           }
         }
       }