fix(codeqlExecuteScan): check for compliance for Audit All (#4796)

Co-authored-by: sumeet patil <[email protected]>
SAP · Jan 25, 2024 · 4be7b99 · 4be7b99
1 parent 33b8c48
commit 4be7b99
Showing 1 changed file with 6 additions and 4 deletions.
diff --git a/cmd/codeqlExecuteScan.go b/cmd/codeqlExecuteScan.go
@@ -399,10 +399,12 @@ func runCodeqlExecuteScan(config *codeqlExecuteScanOptions, telemetryData *telem
 
 		if config.CheckForCompliance {
 			for _, scanResult := range scanResults {
-				unaudited := scanResult.Total - scanResult.Audited
-				if unaudited > config.VulnerabilityThresholdTotal {
-					msg := fmt.Sprintf("Your repository %v with ref %v is not compliant. Total unaudited issues are %v which is greater than the VulnerabilityThresholdTotal count %v", repoUrl, repoInfo.Ref, unaudited, config.VulnerabilityThresholdTotal)
-					return reports, errors.Errorf(msg)
+				if scanResult.ClassificationName == codeql.AuditAll {
+					unaudited := scanResult.Total - scanResult.Audited
+					if unaudited > config.VulnerabilityThresholdTotal {
+						msg := fmt.Sprintf("Your repository %v with ref %v is not compliant. Total unaudited issues are %v which is greater than the VulnerabilityThresholdTotal count %v", repoUrl, repoInfo.Ref, unaudited, config.VulnerabilityThresholdTotal)
+						return reports, errors.Errorf(msg)
+					}
 				}
 			}
 		}