jeremylong / DependencyCheck

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
https://owasp.org/www-project-dependency-check/
Apache License 2.0
6.34k stars 1.27k forks source link

JSON Format Schema #6718

Open jenspopp opened 4 months ago

jenspopp commented 4 months ago

Hi,

I would like to read the json report for a custom pipeline report generator that mixes in some other results. Is there a schema or other definition of the json format? I only found the velocity templates in the source code...

jeremylong commented 4 months ago

I don't think I've ever created a json schema for this. The template is here: https://github.com/jeremylong/DependencyCheck/blob/main/core/src/main/resources/templates/jsonReport.vsl