[FEATURE REQUEST] Fail task only if certain severity is present in the result

[MCBBosch]

I'd like to have a more fine-grained way to configure if the pipeline task should fail. Currently, it's only possible let the task fail if at least one finding is present (with the exitCode parameter).

I'd like to have the task fail upon CRITICAL and HIGH issues while issues with lower priorities shall be reported as well but not fail the whole task. Setting the existing "severities" property to values < HIGH doesn't help, as the high ones won't be reported then.

[maikfr]

Same here. Such a function would be highly appreciated, and would be very helpful.

[PascalTurbo]

Same here. Currently, complex workarounds are needed to achieve reporting and breaking the pipeline.

[MCBBosch]

I'd like to add the condition if a fix is available or not, e.g. fail the pipeline for CRITICAL and HIGH if a fix is available