Skip to content

Commit 22b933c

Browse files
committed
Refine the rendering of vulnerability tab and add analysis
Signed-off-by: tdruez <tdruez@aboutcode.org>
1 parent a66516f commit 22b933c

1 file changed

Lines changed: 35 additions & 20 deletions

File tree

scanpipe/templates/scanpipe/tabset/tab_vulnerabilities.html

Lines changed: 35 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -2,9 +2,9 @@
22
<table class="table is-bordered is-striped is-narrow is-hoverable is-fullwidth">
33
<thead>
44
<tr>
5-
<th style="width: 210px;">Affected by</th>
5+
<th style="width: 220px;">Affected by</th>
66
<th>Summary</th>
7-
<th style="width: 210px;">Aliases</th>
7+
<th>Analysis</th>
88
</tr>
99
</thead>
1010
<tbody>
@@ -15,28 +15,43 @@
1515
{{ vulnerability.vulnerability_id }}
1616
<i class="fa-solid fa-up-right-from-square is-small"></i>
1717
</a>
18+
<ul class="list-unstyled mb-0">
19+
{% for alias in aliases %}
20+
<li>
21+
{% if alias|slice:":3" == "CVE" %}
22+
<a href="https://nvd.nist.gov/vuln/detail/{{ alias }}" target="_blank">{{ alias }}
23+
<i class="fa-solid fa-up-right-from-square mini"></i>
24+
</a>
25+
{% elif alias|slice:":4" == "GHSA" %}
26+
<a href="https://github.com/advisories/{{ alias }}" target="_blank">{{ alias }}
27+
<i class="fa-solid fa-up-right-from-square mini"></i>
28+
</a>
29+
{% elif alias|slice:":3" == "NPM" %}
30+
<a href="https://github.com/nodejs/security-wg/blob/main/vuln/npm/{{ alias|slice:"4:" }}.json" target="_blank">{{ alias }}
31+
<i class="fa-solid fa-up-right-from-square mini"></i>
32+
</a>
33+
{% else %}
34+
{{ alias }}
35+
{% endif %}
36+
</li>
37+
{% endfor %}
38+
</ul>
1839
</td>
1940
<td>
20-
{{ vulnerability.summary }}
21-
</td>
22-
<td>
23-
{% for alias in vulnerability.aliases %}
24-
{% if alias|slice:":3" == "CVE" %}
25-
<a href="https://nvd.nist.gov/vuln/detail/{{ alias }}" target="_blank">{{ alias }}
26-
<i class="fa-solid fa-up-right-from-square is-small"></i>
27-
</a>
28-
{% elif alias|slice:":4" == "GHSA" %}
29-
<a href="https://github.com/advisories/{{ alias }}" target="_blank">{{ alias }}
30-
<i class="fa-solid fa-up-right-from-square is-small"></i>
31-
</a>
32-
{% elif alias|slice:":3" == "NPM" %}
33-
<a href="https://github.com/nodejs/security-wg/blob/main/vuln/npm/{{ alias|slice:"4:" }}.json" target="_blank">{{ alias }}
34-
<i class="fa-solid fa-up-right-from-square is-small"></i>
35-
</a>
41+
{% if vulnerability.summary %}
42+
{% if vulnerability.summary|length > 150 %}
43+
<details>
44+
<summary>{{ vulnerability.summary|slice:":150" }}...</summary>
45+
{{ vulnerability.summary|slice:"150:" }}
46+
</details>
3647
{% else %}
37-
{{ alias }}
48+
{{ vulnerability.summary }}
3849
{% endif %}
39-
<br>
50+
{% endif %}
51+
</td>
52+
<td>
53+
{% for key, value in vulnerability.cdx_vulnerability.analysis.items %}
54+
<strong>{{ key }}:</strong> {{ value }}{% if not forloop.last %}<br>{% endif %}
4055
{% endfor %}
4156
</td>
4257
</tr>

0 commit comments

Comments
 (0)