florian/pdf-reporting
1
0 Fork 1
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity
12 Commits 1 Branch 0 Tags
ae04b50a6c282a683375200a62e4f13f77422450
Commit Graph
9 Commits
Author SHA1 Message Date
alexanderandClaude Opus 5.5 ae04b50a6c Label the set-aside count Suppressed / False Positives 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-09-24 20:42:32 +02:00
alexanderandClaude Opus 5.5 08a8477442 Report the scanned commit as the project version 
The pipeline leaves repository_version empty, but tags the Dependency-Track
upload with the commit it scanned. Use that when no version is stated.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-09-24 20:42:25 +02:00
alexanderandClaude Opus 5.5 dc8ed38d8c Let the project name and the manufacturer be supplied on the command line 
Neither is recorded in the artifacts: the metadata's repository_name is
empty and nothing names a manufacturer. --project wins over the metadata.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-09-24 20:41:56 +02:00
alexanderandClaude Opus 5.5 5959d9364b Retitle the report and drop the report and artifact ids 
The report now covers every finding from all tools, so "SAST/SCA Report"
undersold it. The report and artifact ids were never filled in.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-09-24 20:41:06 +02:00
alexander 2e2ab63232 Add toc and include all findings in the report 2026-09-24 20:33:00 +02:00
Florian Frank f775e1f1ed Improve naming different metrics. 2026-09-21 22:09:01 +02:00
Florian Frank 9247608a9f Integrate metrics from metrics.json into the report pdf. 2026-09-21 21:47:29 +02:00
Florian Frank 9d7df77923 Allow generation of metrics.json simply by accessing the artifacts folder. 2026-09-21 21:30:32 +02:00
Florian Frank 06593ac488 Initial commit. monorepo deps are copied in a dirty way to the vendor folder 2026-09-18 16:58:29 +02:00