From c516c4261825c55379ef447ac633338d3ba1f3c2 Mon Sep 17 00:00:00 2001
From: gnmahanth <mahanth@deepfence.io>
Date: Fri, 9 Aug 2024 06:11:31 +0000
Subject: [PATCH] dont send ExploitabilityScore to console

---
 run-once.go            | 2 +-
 scanner/grype/grype.go | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/run-once.go b/run-once.go
index 29c4ee5..632ed83 100644
--- a/run-once.go
+++ b/run-once.go
@@ -235,7 +235,7 @@ func GroupByExploitability(
 ) {
 
 	for _, r := range *reports {
-		if r.ExploitabilityScore > 0 {
+		if r.InitExploitabilityScore > 0 {
 			exploitable = append(exploitable, r)
 		} else {
 			others = append(others, r)
diff --git a/scanner/grype/grype.go b/scanner/grype/grype.go
index fbf2866..ff3309d 100644
--- a/scanner/grype/grype.go
+++ b/scanner/grype/grype.go
@@ -147,7 +147,7 @@ func PopulateFinalReport(vulnerabilities []byte, cfg utils.Config) ([]scanner.Vu
 			score = 1
 		}
 
-		report.ExploitabilityScore = score
+		report.ExploitabilityScore = 0
 		report.InitExploitabilityScore = score
 		report.HasLiveConnection = false