Read the result in the build

Where it shows up

Where	What shows up
Step [<appName>] Leavory Security Gate	A table with the evaluated vulnerabilities, the rule used and the total over the limit
Extensions tab of the build	The Leavory Security Gate - <appName> card, with the formatted summary
Error list	One line per vulnerability over the limit
Build result	fail: red, and the following steps don’t run. warn: yellow. Nothing over the limit: green

Example line in the error list:

CVE-2026-47884 CRITICAL in org.springframework:spring-webmvc 6.2.19: published 45 days ago (2026-08-27, NVD), limit 7 days; fixed in 7.0.9

The “Leavory Security Gate” card

Status line: ❌ N over the limit · Exposure age rule: CRITICAL > 7 days, HIGH > 30 days · Mode: fail, or ✅ Nothing over the limit · ....

Details line: how many were evaluated, how many have no date and the order of the date sources.

Column	What it shows
Status	🔴 Over the limit, 🟢 Within limit or ⚪ No date
Vulnerability	Vulnerability ID (CVE or GHSA)
Severity	CRITICAL or HIGH
Package	Affected package
Installed → Fixed	Installed version → fixed version
Published	Publication date and its source
Age	Days since publication and the limit. In bold when over the limit

The “Trivy Scan” card

If you use the scan steps generated by Leavory, you also get the Trivy Scan - <appName> card, in the same format.

Column	What it shows
Scan	Image (the built image) or Filesystem (the repository code)
Critical / High / Medium / Low	Count per severity
Misconfigurations	Configuration problems (Dockerfile, Kubernetes, etc.)
Secrets	Secrets exposed in the code or the image

Below it comes the Critical and high vulnerabilities (N) table, with up to 50 rows. The full report is in the build’s trivy-report-<appName> artifact.

Icons

Icon	Meaning
✅	Nothing requires action
❌	There are items that require action
⚠️	Could not evaluate
🔴	Critical, or over the limit
🟠	High
🟢	Within the limit
⚪	No information (for example, no publication date)