in amazon-inspector-image-scanner/amazon-inspector-image-scanner-agent/src/main/java/com/amazon/inspector/teamcity/utils/ConversionUtils.java [19:45]
public static Severity getSeverity(Vulnerability vulnerability) {
if (vulnerability == null || vulnerability.getRatings() == null) {
return Severity.NONE;
}
List<Rating> ratings = vulnerability.getRatings();
if (ratings.isEmpty()) {
return Severity.NONE;
}
Map<String, Severity> severityMap = new HashMap<>();
for (Rating rating : ratings) {
if (rating == null || rating.getSource() == null) {
continue;
}
String sourceName = rating.getSource().getName();
String method = rating.getMethod();
if (sourceName.equals(NVD)) {
severityMap.put(getCvssMethod(method), Severity.getSeverityFromString(rating.getSeverity()));
}
}
return getHighestCvssMethodSeverity(severityMap);
}