{% if announcements|length > 0 %}

Announcements

    {% for announcement in announcements %} {% set color = "#DC3545" if announcement.type == "error" else "#8B4000" if announcement.type == "warning" else "#6C757D" %}
  • {{ announcement.message }}
  • {% endfor %}
{% endif %}

Safety Scan Report

Scan Summary

Packages Found (details ↓)

{{ summary.scanned_packages }}

Vulnerabilities Reported (details ↓)

{{ summary.vulnerabilities }}
{% if summary.ignored_vulnerabilities > 0 %}

Found vulnerabilities that were ignored: {{ summary.ignored_vulnerabilities }}

{% endif %}
{% if summary.remediations_recommended > 0 %}

Remediations Suggested (details ↓)

{{ summary.remediations_recommended }}
{% endif %}
Meta-data

Time: {{report.metadata.timestamp}}

Safety version: {{report.metadata.telemetry.safety_version}}

{% if report.metadata.authenticated %} {{report.metadata.authentication_type|title}} authentication using the Safety's proprietary vulnerability database {% else %} No authenticated using the Safety's free vulnerability database {% endif %}

Configuration file: {% if project and project.policy %} {{ project.policy.id }} (source: {{project.policy.source.value|title}}) {% else %} None {% endif%}

{% if settings.audit_and_monitor %}

Audit and monitor: Enabled. Logging scan results to Safety Platform →

{% endif %}

Scan ecosystems:

    {% for ecosystem, file_types in settings.ecosystems %}
  • {{ ecosystem }}: {{file_types | join (', ')}}
  • {% endfor %}

Scan paths:

    {% for location in report.metadata.scan_locations %}
  • {{location}}
  • {% endfor %}
{% if project and project.git %}

Scan git context

  origin: {{ project.git.origin }}

  branch: {{ project.git.branch }}

{% endif %}
{% for file in project.files %}

{{ file.file_type.human_name() }}: {{ file.location }}

Scanned Packages [ # ]

{% for dependency in file.results.dependencies %} {% endfor %}
Package name Found requirements
{{dependency.name}}
    {% for spec in dependency.specifications %}
  • {{ spec }}
  • {% endfor %}

Vulnerabilities Reported [ # ]

{% if vulns_per_file[file.location] > 0 %}
{% for dependency in file.results.dependencies %} {% for spec in dependency.specifications %} {% for vulnerability in spec.vulnerabilities %} {% endfor %} {% endfor %} {% endfor %}
Vulnerability ID Package name Analyzed requirement Vulnerable spec All vulnerable specs Advisory Published date CVE severity
{{ vulnerability.vulnerability_id }} {{vulnerability.package_name}} {{vulnerability.analyzed_requirement}} {{vulnerability.vulnerable_spec}} {{vulnerability.all_vulnerable_specs}} {{vulnerability.advisory}} {{vulnerability.published_date}} {% if vulnerability.CVE %}{{vulnerability.CVE.name}}{% else %}No CVE{% endif %} {% if not report.metadata.authenticated and not vulnerability.severity %} Use a Safety account (?) {% else %} {{vulnerability.severity}} {% endif %}
{% else %}

No known security vulnerabilities were found. {% if not report.metadata.authenticated %} Vulnerabilities may be missing. For comprehensive vulnerability scanning, use a Safety account {% endif %}

{% endif %}
{% if file.results.ignored_vulns_data|length > 0 %}

Vulnerabilities ignored [ # ]

{% for vuln_id, data in file.results.ignored_vulns_data.items() %} {% endfor %}
Vulnerability ID Package name Version/Spec Notes Expires
{{ data.vulnerability_id }} {{ data.package_name }} {% if data.analyzed_version %} {{ data.analyzed_version }} {% else %} {{ data.analyzed_requirement }} {% endif %} {{data.ignored_reason|default("-", true)}} {{data.ignored_expires|default("-", true)}}
{% endif %} {% if vulns_per_file[file.location] > 0 %}

Affected Packages [ # ]

{% for affected_dep in file.results.get_affected_dependencies() %} {% endfor %}
Package name Version/Requirements Location Insecure versions Latest version without known vulnerabilities More info
{{affected_dep.name}} {% if affected_dep.version %} {{ affected_dep.version }} {% else %}
    {% for spec in affected_dep.specifications %}
  • {{ spec }}
  • {% endfor %}
{% endif %}
    {% for spec in affected_dep.specifications %}
  • {{ spec.found }}
  • {% endfor %}
{{affected_dep.insecure_versions}} {{affected_dep.latest_version_without_known_vulnerabilities}} More Info
{% endif %} {% if vulns_per_file[file.location] > 0 %}

Remediations suggested [ # ]

{% if remed_per_file[file.location] > 0 %}
{% for affected_spec in file.results.get_affected_specifications() %} {% with remediation = affected_spec.remediation %} {% endwith %} {% endfor %}
Package name Version/Requirement Vulnerabilities reported Recommended versions Other recommended versions More info
{{ affected_spec.name }} {{ affected_spec.specifier }} {{ remediation.vulnerabilities_found }} {% if not report.metadata.authenticated and not remediation.recommended %} Use an account or API key (?) {% else %} {{ remediation.recommended }} {% endif %} {% if not report.metadata.authenticated and remediation.other_recommended|length==0 %} Use an account or API key (?) {% else %} {{ remediation.other_recommended }} {% endif %} {% if remediation.more_info_url %} {{ remediation.more_info_url }} {% else %} Use an account or API key (?) {% endif %}
{% else %}

Use an account or API key to get remediation recommendations (?)

{% endif %}
{% endif %}
{% endfor %} {% if not report.metadata.authenticated %}

Use an account or API Key: Running Safety using an account or API Key uses a more comprehensive commercial vulnerability database and adds other features such as remediation suggestions and enhanced vulnerability and package information. Learn more and get a free account or API Key

{% endif %}

Safety Scanner and vulnerability data proudly maintained by Safety Cybersecurity