Skip to content

feat: add --report flag to generate HTML vulnerability dashboard#220

Merged
sonukapoor merged 22 commits intomainfrom
feature/issue-219-html-report
Apr 24, 2026
Merged

feat: add --report flag to generate HTML vulnerability dashboard#220
sonukapoor merged 22 commits intomainfrom
feature/issue-219-html-report

Conversation

@sonukapoor
Copy link
Copy Markdown
Collaborator

@sonukapoor sonukapoor commented Apr 24, 2026

Changes

  • Adds --report [dir] flag that generates a self-contained index.html vulnerability dashboard and report.json in the specified directory (default: ./cve-report)
  • Adds --no-open flag to suppress auto-opening the report in the browser
  • Report is fully self-contained — no CDN, no server required; opens directly as a file:// URL
  • CVE Lite logo embedded as base64 so the report works for npm-installed users who have no assets/ folder

Report features:

  • Dark-theme dashboard with severity summary cards (critical / high / medium / low / total)
  • Suggested fix plan with copy-to-clipboard commands and collapsible "why skipped" breakdown
  • Findings table with filter buttons (all / critical / high / medium / direct), sortable columns, and inline row expand/collapse showing description, dependency path, and recommended action
  • CVE IDs linked to osv.dev; GHSA IDs linked to github.com/advisories
  • Official OWASP logo (with permission) + link to project page; GitHub link updated to OWASP org
image

Closes #219

Captures the approved design for the --report flag feature: folder
output with index.html + report.json, fix plan section, sortable
filterable findings table with inline row expansion, and auto-open.
Comment thread src/output/html-reporter.ts Fixed
Comment thread src/output/html-reporter.ts Dismissed
@sonukapoor sonukapoor merged commit e694fcc into main Apr 24, 2026
4 checks passed
@sonukapoor sonukapoor deleted the feature/issue-219-html-report branch April 24, 2026 21:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

feat: add --report flag to generate HTML vulnerability report

2 participants