microsoft / AttackSurfaceAnalyzer

Attack Surface Analyzer can help you analyze your operating system's security configuration for changes during software installation.
MIT License
2.72k stars 276 forks source link

Add Export Sarif Button to GUI #697

Open jbuettner00 opened 1 year ago

jbuettner00 commented 1 year ago

It would be nice to be able export the entire analysis report to a single HTML file, or other browser format, so that it can be passed to anyone and they can open it in any web browser and see the results without having to look through the json file or create a tool to parse the json file or have access to the original instance of the ASA where the report was created.

Option to select to export ASA report to an HTML

Describe alternatives you've considered The alternative is creating a tool to parse the json and display it in a useful visual format or zipping up the entire instance of the ASA where the report was created and attaching it where others can download it to see the report. Another alternative is to use the browser's Save As feature to save the current data in the page to an html file, the issue with this is you only get the data for the current page of the report that you are on so you would have to save a file for every page which is not very useful when there are 30+ pages of data in the report.

System Configuration (please complete the following information):

Additional context N/A

gfs commented 1 year ago

ASA supports exporting the report as Sarif which has a number of view clients available (including the sarif web component: https://microsoft.github.io/sarif-web-component/)

Have you tried with the sarif format report?

jbuettner00 commented 1 year ago

I have not tried the sarif export, I wasn't aware of that. So is it only available to be export from the asa command line parameters?

gfs commented 1 year ago

Yes, I believe you can only export sarif from the command line currently. I can take a look at adding a sarif export button for the GUI as well. Thanks for the feedback.

jbuettner00 commented 1 year ago

Thanks, I looked at the sarif export and this will work for us.

gfs commented 1 year ago

Keeping this issue open to track potentially adding a sarif export button to the GUI.