• A Rapid7 Application Security search query may be supplied to search vulnerabilities found by the scan.
  • For example, if you wish to fail the build when critical or high severity vulnerabilities have been found, use:
                           vulnerability.severity='CRITICAL' || vulnerability.severity='HIGH'
                
  • Supported severity values: CRITICAL, HIGH, MEDIUM, LOW, INFORMATIONAL, SAFE
  • The query supplied will automatically be scoped to the scan
  • For more information on vulnerability search queries, consult the Rapid7 Application Security API search documentation here:
    https://help.rapid7.com/insightappsec/en-us/api/v1/docs.html#tag/Search
  • If left blank, the build will fail when any vulnerabilities have been found in the scan