Comments (9)
Hi @prasenjitsh ,
Thanks for the feature request. To answer your two questions:
1- Combining the two reports is one of our plans which is a big change. Before investing into that we would like to see the demand from the community. Could I ask you how important feature is that for you/your company? Other question is that how do you store all the scan results for a project? Say over a year you have done the scanning and created 365 reports. Do you need some auditing/history?
2- Configuring left side menu - it is not possible right now but very easy to implement. To clarify your request: if the report includes only vulnerabilities then vulnerabilities menu will be selected as default. if secrets then secrets is the default and so on ?
Regards,
Fatih
from scan2html.
HI @fatihtokus ,
- We are running Trivy as part of our Azure DevOps pipeline. Please see the screenshot below. These reports will be available in the release pipeline for six months for auditing purposes.
- I was actually looking to see if we can hide those menus that are not required. If you see the screenshot, currently, I’m scanning one time for vulnerabilities and another time for secrets. I am planning to implement SBOM and K8 scanner in the future. Each of the tabs should have only one report visible instead of the entire menu list, so that developers don’t get confused.
![Screenshot 2024-06-07 at 10 20 30 AM](https://private-user-images.githubusercontent.com/40861523/337527153-7ee0ee2e-e63e-4c34-8fae-ceaa1f75be72.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.K_wu4u1g4WOsVRcSzdjg-7cvMvgW49-BSmJ5SaGOwqs)
from scan2html.
Hi @prasenjitsh ,
Thanks for the answers:
- We are planning to accept multiple trivy-results.json reports as url parameters like below.
scan2html-empty-report.html?url=https://$CI_SERVER_URL/api/v4/projects/$CI_PROJECT_ID/jobs/$CI_JOB_ID/artifacts/trivy-vuln-results.json&https://$CI_SERVER_URL/api/v4/projects/$CI_PROJECT_ID/jobs/$CI_JOB_ID/artifacts/trivy-secrets-results.json
Would this address your requirement?
2- As a quick solution I will collapse the menu and open the filled one as default, will this help you?
from scan2html.
Hi @fatihtokus ,
- Can it load from local directory instead of https? Since I will be running from from pipeline it will be easy to load from local machine.
- yes that will help
from scan2html.
1- unfortunately, due to the browsers' security limitations, it has to come via https/http :( Do you think it still will be useful for you?
2- We have started working on this.
from scan2html.
- I have to see. I can publish the JSON as azure pipeline artifacts. I have to verify whether these artifacts can be accessed via https from shell.
from scan2html.
Hi @prasenjitsh ,
1- Still working on this, will update you soon
2- We have released this with v0.3.1, please try and give us feedback.
Regard
from scan2html.
Hi @prasenjitsh ,
1- We have delivered this as well, please give it a try and let us know your feedback
2- Any feedback?
from scan2html.
from scan2html.
Related Issues (20)
- feat: Integrate with plugin index of trivy HOT 1
- feat: add a dashboard
- feat: add a menu on the left hand side
- Secrets are not displaying in UI HOT 3
- Exit code is not capturing properly HOT 4
- feat: Load a report from a Url as a request parameter
- feat: Load multiple reports from a Url as request parameters
- feat: Select automatically the menu(vulns, secrets etc) that has data
- feat: add summary of findings per severity on vulnerabilities, misconfigurations and secrets pages
- feat: add filters per severity on vulnerabilities, misconfigurations and secrets pages
- html report not readable HOT 6
- Feature Request: HOT 4
- Show CVSS score in the vulnerability table
- Add OpenSSF scorecard score badge
- Solution References Info in Vulnerability and Misconfigurations Report HOT 2
- Refactor scan2html.sh
- I cannot install the plugin - 404 Not Found HOT 3
- Additional columns in report HOT 2
- Support for Generating a Single Interactive Report and Loading multiple Trivy JSON Reports in scan2html
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from scan2html.