search

fortify / fortify-ssc-parser-owasp-dependency-check

Fortify SSC Parser Plugin for OWASP Dependency Check results
Other
3 stars 0 forks source link

RetireJS references are missing #13

Open ulr1chA opened 8 months ago

ulr1chA commented 8 months ago

Hi,

could you please add the references to the description of the issue?

OWASP -> 9.0.10

image

rsenden commented 8 months ago

Hi, thanks for posting this enhancement request. I'll put this on the backlog, but as mentioned in the Support section, there's no guarantee as to whether or when new features will be implemented. Given that source code is available, you could consider implementing this feature yourself or have Fortify Professional Services assist in implementing this feature, and potentially contribute the changes back to this project (see CONTRIBUTING.md for details).

As for actually implementing this enhancement, please note that SSC doesn't allow parser plugins to generate clickable links, so best we could do is to display the reference links as plain text, which users can then manually copy into their browser. Also, SSC layout capabilities for 3rd-party issues are fairly limited, so we'd need to check whether SSC supports bulleted lists or other layout controls for displaying a list of references in a user-friendly way.