More than one report format

[igor-sosnowicz]

Hi, I really appreciate your attention to details and polish of the application.
I would really welcome being able to obtain more than one file with report.

Use case:
I would like to scan an API endpoint and then generate a table report and also store results in report.yaml for archivisation purposes.

Thank your for your work.
Best regards!

[emmanuelgautier]

Hi @igor-sosnowicz

Thanks a lot for your kind words and for sharing your use case.

While it's already possible to generate reports in YAML or JSON format, the ability to output multiple formats at once could definitely be a useful addition.

If you have more context about how you’d ideally use this (e.g., where/how you archive the YAML, how you consume it later), feel free to share. It could help make this new feature even more useful for your setup.

I am also working on a GitHub Action that will help automate the archiving and displaying of reports in CI pipelines if it is your need.

[igor-sosnowicz]

Thank you for your reply!

I am developing an API and utilizing your scanner in one of the CI jobs.

Generating one report at a time is problematic. It requires running the same scanning process twice, which consumes both time and resources.

Speaking of my perfect use case, I would like to parse the YAML file with the report programmatically. Then, those with a CVSS score above a certain threshold would cause the CI job to fail. At the same time, I would archive a text file in a table format as an artifact of the CI job. This artifact could be reviewed in case of failure. It is much more convenient to manually inspect than a YAML file.

I am glad you mentioned the ongoing effort to create a GitHub Action. It would be helpful, but it is not a necessity.

Personally, I appreciate a rich open-source CLI tool (Vulnapi) more than any add-on to a proprietary platform (GitHub Action).