NuGetDefense.json

{
    "WarnOnly": false,
    "VulnerabilityReports": {
        "OutputTextReport": true
    },
    "CheckTransitiveDependencies": true,
    "CheckReferencedProjects": false,
    "ErrorSettings": {
        "ErrorSeverityThreshold": "any",
        "Cvss3Threshold": -1,
        "IgnoredPackages": [
            {
                "Id": "NugetDefense"
            }
        ],
        "IgnoredCvEs": [],
        "AllowedPackages": [],
        "WhiteListedPackages": [],
        "BlockedPackages": [],
        "BlacklistedPackages": []
    },
    "OssIndex": {
      "ApiToken": "OSSINDEXAPI_TOKEN",
      "Username": "OSSINDEXAPI_USERNAME",
      "Enabled": true,
      "BreakIfCannotRun": false
    },
    "GitHubAdvisoryDatabase": {
        "ApiToken": "",
        "Username": "",
        "Enabled": false,
        "BreakIfCannotRun": false
    },
    "NVD": {
        "SelfUpdate": false,
        "TimeoutInSeconds": 15,
        "Enabled": true,
        "BreakIfCannotRun": true
    },
    "SensitivePackages": []
}