May 13th, 2025

Reporting Enhancements & Analytics

πŸ“ˆ Scan & Vulnerability Reporting

  • Implemented /api/v2/report and /api/v2/report/scans endpoints to deliver comprehensive scan analytics and vulnerability summaries.

  • Reports now include:

    • Total number of scans, projects, files, and lines of code scanned.

    • Breakdown of vulnerabilities grouped by scanner (e.g., SAST, IAC, SECRET, etc.).

    • Counts of findings by status: True Positive, False Positive, Unverified.

🧠 Historical Comparisons & Trends

  • Added comparison support between current (live) and one_month_ago metrics.

  • Markdown templates were created to display percentage change trends:

    • πŸ“ˆ Increase or πŸ“‰ decrease in scans, files, and LoC.

    • Markdown-compatible layout supports rendering in dashboards, GitHub, and PDF exports.

πŸ“‹ Markdown Summary Templates

  • Built dynamic Markdown table rendering:

    • Per-scanner vulnerability breakdown.

    • CWE-based and status-based vulnerability distribution tables.

    • Aggregate totals across scanners and statuses included in table footers.

  • Added project listings with links, scan references, and metadata such as created_at and branch.

πŸ” Automation & Streamlined Insights

  • Vulnerability reports auto-update using latest completed scans (per project).

  • Introduced support for mermaid.js and basic charting ideas for future visual dashboards.