google / osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev
https://google.github.io/osv-scanner/
Apache License 2.0
6.27k stars 363 forks source link

feat(output): show package view for container scanning table result #1407

Closed hogo6002 closed 6 days ago

hogo6002 commented 1 week ago

Fixes #1315

For container scanning, instead of listing hundreds of vulnerabilities, the output now shows the affected packages.

Changes:

Future Plans (to be implemented after the comprehensive layer and base image information are available):

Sample output: Screenshot 2024-11-19 at 4 53 49 PM Screenshot 2024-11-19 at 4 53 58 PM

codecov-commenter commented 1 week ago

Codecov Report

Attention: Patch coverage is 95.77465% with 3 lines in your changes missing coverage. Please review.

Project coverage is 69.51%. Comparing base (5e82cf7) to head (662715d). Report is 2 commits behind head on main.

Files with missing lines Patch % Lines
internal/output/table.go 94.73% 1 Missing and 2 partials :warning:
Additional details and impacted files ```diff @@ Coverage Diff @@ ## main #1407 +/- ## ========================================== + Coverage 69.05% 69.51% +0.46% ========================================== Files 186 186 Lines 18237 18326 +89 ========================================== + Hits 12593 12739 +146 + Misses 4965 4911 -54 + Partials 679 676 -3 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.


🚨 Try these New Features: