palantir / log4j-sniffer

A tool that scans archives to check for vulnerable log4j versions

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Support deleting of vulnerable files

glynternet opened this issue · comments

We need to run a limited for of deleting some vulnerable matches.
Not all finding will be safe for immediate deletion so we will need to make this feature optional and provide a robust filtering of finding to match only a certain subset.

Exact filtering behaviour TBD and I'll update here once we have had a chance to discuss what we deem to be acceptable.