incorrect operator

Signed-off-by: Ross Murphy <[email protected]>
DependencyTrack · May 23, 2024 · 203028a · 203028a
1 parent 029ac5f
commit 203028a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/main/java/org/dependencytrack/policy/EpssPolicyEvaluator.java b/src/main/java/org/dependencytrack/policy/EpssPolicyEvaluator.java
@@ -76,7 +76,7 @@ public boolean matches(final PolicyCondition.Operator operator, final BigDecimal
             case NUMERIC_GREATER_THAN_OR_EQUAL -> vulnerabilityEpss.compareTo(conditionDecimalValue) >= 0;
             case NUMERIC_EQUAL -> vulnerabilityEpss.compareTo(conditionDecimalValue) == 0;
             case NUMERIC_NOT_EQUAL -> vulnerabilityEpss.compareTo(conditionDecimalValue) != 0;
-            case NUMERIC_LESSER_THAN_OR_EQUAL -> vulnerabilityEpss.compareTo(conditionDecimalValue) >= 0;
+            case NUMERIC_LESSER_THAN_OR_EQUAL -> vulnerabilityEpss.compareTo(conditionDecimalValue) <= 0;
             case NUMERIC_LESS_THAN -> vulnerabilityEpss.compareTo(conditionDecimalValue) < 0;
             default -> {
                 LOGGER.warn("Operator %s is not supported for EPSS conditions".formatted(operator));