Configure Mend Bolt for GitHub

[mend-bolt-for-github]

Welcome to Mend Bolt for GitHub (formerly WhiteSource). This is an onboarding PR to help you understand and configure settings before Mend starts scanning your repository for security vulnerabilities.

🚦 Mend Bolt for GitHub will start scanning your repository only once you merge this Pull Request. To disable Mend Bolt for GitHub, simply close this Pull Request.

---

What to Expect

This PR contains a '.whitesource' configuration file which can be customized to your needs. If no changes were applied to this file, Mend Bolt for GitHub will use the default configuration.

Before merging this PR, Make sure the Issues tab is enabled. Once you merge this PR, Mend Bolt for GitHub will scan your repository and create a GitHub Issue for every vulnerability detected in your repository.

If you do not want a GitHub Issue to be created for each detected vulnerability, you can edit the '.whitesource' file and set the 'minSeverityLevel' parameter to 'NONE'.

---

❓ Got questions? Check out Mend Bolt for GitHub docs.
If you need any further assistance then you can also request help here.

[MaisiKoleni]

Is there a reason for this, meaning any action from our side? Otherwise I would categorize this as spam / cold calling and close the PR. @krusche @MarkusPaulsen

[b-fein]

/cc @FelixTJDietrich since it seems to be used in ls1intum/Hephaestus#51

[FelixTJDietrich]

It was activated on org level by @krusche, I just merged it in Hephaestus and it created some security issues. I thought we are supposed to merge it 🤔

[krusche]

yes, we want to try it out and see if it helps identify additional security vulnerabilities in dependencies. @MaisiKoleni you can ignore it ;-) we will take care