May 13th, 2025
Implemented /api/v2/report and /api/v2/report/scans endpoints to deliver comprehensive scan analytics and vulnerability summaries.
Reports now include:
Total number of scans, projects, files, and lines of code scanned.
Breakdown of vulnerabilities grouped by scanner (e.g., SAST, IAC, SECRET, etc.).
Counts of findings by status: True Positive, False Positive, Unverified.
Added comparison support between current (live) and one_month_ago metrics.
Markdown templates were created to display percentage change trends:
π Increase or π decrease in scans, files, and LoC.
Markdown-compatible layout supports rendering in dashboards, GitHub, and PDF exports.
Built dynamic Markdown table rendering:
Per-scanner vulnerability breakdown.
CWE-based and status-based vulnerability distribution tables.
Aggregate totals across scanners and statuses included in table footers.
Added project listings with links, scan references, and metadata such as created_at and branch.
Vulnerability reports auto-update using latest completed scans (per project).
Introduced support for mermaid.js and basic charting ideas for future visual dashboards.