dependency-check / dependency-check/DependencyCheck

Add CVE number to name attribute in JUnit output so that it will be displayed on Azure Pipeline Runs results

Open
#5,575 2 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
7.7k
Forks
1.4k
Avg merge
9d 22h
Merged PRs (30d)
13

Description

**Is your feature request related to a problem? Please describe.**
Azure Pipeline supports publishing the DependencyCheck report generated by maven in Junit format to its Test Runs report page.

The CVE number which is arguably the most important piece of information in the generated report is missing from being displayed on the Azure DevOps Runs Report page. Instead, the attribute "name" under the tag testcase is displayed, .e.g., pkg:maven/org.yaml/snakeyaml@1.30

**Describe the solution you'd like**
Add the CVE number to the attribute "name" so that it will be displayed on Azure DevOps Runs Report page, e.g.,
Current:
<testcase classname="CVE-2022-25857" name="pkg:maven/org.yaml/snakeyaml@1.30">
Proposed:
<testcase classname="CVE-2022-25857" name="**CVE-2022-25857** pkg:maven/org.yaml/snakeyaml@1.30">

**Describe alternatives you've considered**
Any other means so that the CVE number is displayed on the Azure DevOps Runs page are appreciated.

**Additional context**
Exhibit 1 - Azure DevOps screen : On the Runs > Test results page, no CVE number is displayed:
![image](https://user-images.githubusercontent.com/78407555/226812755-299248db-3c9a-4695-84ab-0a6ed000c71e.png)

Exhibit 2 - Azure DevOps screen : Drill down the failed test case, no CVE number is displayed. The title seems like to be extracted from the "name" attribute only.
![image](https://user-images.githubusercontent.com/78407555/226813029-348c7027-742e-42e1-a55a-1285fd1e7bb7.png)

Exhibit 3 - The sample junit report xml file showing the proposed attribute change, i.e., prepend CVE number to the "name" attribute of the testcase tag.
![image](https://user-images.githubusercontent.com/78407555/226813322-15a40c4f-4672-4e33-8af7-08ec990c3434.png)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.