Multiple formats for CVE scan
Open
Nobody has claimed this yet.
enhancement
- Dominant language
- Shell
- Stars
- 454
- Forks
- 134
- PR merge metrics
- No merged PRs in 30d
Description
I'd like to create stdout, SARIF and markdown reports in the same CVE scan - currently if I want all three formats, I have to run docker scout cves --format <format> three separate times.
Having all the formats created in the same run would greatly improve the efficiency of that workflow.
version: 0.24.1 (go1.21.0 - darwin/arm64)
git commit: 67cb4ef78bd69545af0e223ba5fb577b27094505
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the docker scout cves --format <format> command and inspect how a single requested report format is selected. Define completion as one CVE scan producing stdout, SARIF, and markdown reports together without three separate runs; no specific files or tests are mentioned in the issue.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- docker, shell
- Domain
- cli, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100