add-cpes-if-none: true
fail-on-severity: high
output: table
exclude:
  - "**/testdata/**"
ignore:
  - fix-state: unknown