Define controls to fail build if libraries are vulnerable for X days

[pmckeown]

As a developer, I would like to know about vulnerabilities in my software but sometimes it is not possible or pragmatic to fix them immediately. I also do not want to suppress such results in Dependency Track to make my build pass. As such I would like to be able to define a period of leeway where my build will continue to pass after a vulnerability is detected to give me time to upgrade the library.

Acceptance Criteria

• A threshold breach in a given metric category will not trigger a build failure until that breach has been in place for a configurable period.

Implementation Notes

• Allow the metrics thresholds mechanism be delayed in triggering based on a provided number of days