@@ -90,36 +90,12 @@ runs:
90
90
91
91
- name : Format Results for PR
92
92
run : |
93
- echo "## Lacework Vulnerabilities Report" > pr-results.md
94
-
95
-
96
- echo "| Severity | Count | Fixable | Exceptions |" >> pr-results.md
97
- echo "|------------|-------|---------|------------|" >> pr-results.md
98
-
99
-
100
- jq -r '.cve | [
101
- "Critical", .critical_vulnerabilities, .fixable_critical_vulnerabilities, .critical_exception_vulnerabilities,
102
- "High", .high_vulnerabilities, .fixable_high_vulnerabilities, .high_exception_vulnerabilities,
103
- "Medium", .medium_vulnerabilities, .fixable_medium_vulnerabilities, .medium_exception_vulnerabilities,
104
- "Low", .low_vulnerabilities, .fixable_low_vulnerabilities, .low_exception_vulnerabilities,
105
- "Info", .info_vulnerabilities, .fixable_info_vulnerabilities, .info_exception_vulnerabilities
106
- ] | @csv' results.stdout | awk -F',' '
107
- {
108
- if (NR % 4 == 1) printf "| %-10s | %-5s | %-7s | %-10s |\n", $1, $2, $3, $4
109
- }' >> pr-results.md
110
-
111
-
112
- echo "\n### Vulnerability Details" >> pr-results.md
113
- echo "| Package | CVE ID | Severity | Current Version | Fix Version |" >> pr-results.md
114
- echo "|-------------------|----------------|----------|-----------------|---------------|" >> pr-results.md
115
-
116
-
117
- jq -r '.vulnerabilities[] | [
118
- .package, .vulnerability_id, .severity, .current_version, .fix_version
119
- ] | @csv' results.stdout | awk -F',' '
120
- {
121
- printf "| %-17s | %-14s | %-8s | %-15s | %-13s |\n", $1, $2, $3, $4, $5
122
- }' >> pr-results.md
93
+ echo "## Lacework Inline Scanner Results" > pr-results.md
94
+ echo "<details><summary>Click to expand</summary>" >> pr-results.md
95
+ echo "<pre>" >> pr-results.md
96
+ cat results.stdout >> pr-results.md
97
+ echo "</pre>" >> pr-results.md
98
+ echo "</details>" >> pr-results.md
123
99
shell : bash
124
100
125
101
- name : Check for Previous Report Comment
0 commit comments