{% include "base.html" %}
{% set run = runs[-1] %} {% set invocation = run.invocations[-1] %} {% set results = run.results %} {% set metrics = run.properties.metrics %} {% set tool = run.tool %} {% set rules = tool.driver.rules %} {% set isError = True if metrics.critical > 0 or metrics.high > 0 or metrics.medium > 5 else False %} {% set versionControlProvenance = run.versionControlProvenance[-1] %}Report from the scan performed on {{ invocation.endTimeUtc|replace("T", " at ")|replace("Z", "") }} for {{ versionControlProvenance.repositoryUri|default('local')}}
This report was generated by ShiftLeft from the SAST Scan invocation on {{ invocation.endTimeUtc|replace("T", " at ")|replace("Z", "") }}. The scan used the open source tool {{ tool.driver.name }} to scan the source code repository {{ versionControlProvenance.repositoryUri|default('local')|urlize(40, target='_blank') }}.
{% if metrics.total %}Below is a summary of the issues identified:
Severity | Count |
---|---|
{{ sev|upper }} | {{ metrics.get(sev)|default('NA') }} |
ShiftLeft Scan recommends immediate remediation of the key issues identified before using this application in a live environment.
{% else %}
Based on this report, the application is certified as ready for deployment to test and production environments. Please refer to the dependency and container scan reports (if available) for additional context.
{% endif %}{{ result.ruleId|default('') }}
{{ location.physicalLocation.artifactLocation.uri|basename }}{{ result.message.text|auto_text_highlight|safe }}
{{ location.physicalLocation.contextRegion.startLine }}: {{ firstLine|safe }}
{{ remLines|safe }}
{% endif %}
Rule | Severity | Source location | Message |
---|---|---|---|
{{ result.ruleId|default('')|linkify_rule(rules)|safe }} | {{ result.properties.issue_severity }} | {{ location.physicalLocation.artifactLocation.uri|basename }} |
{{ result.message.text|auto_text_highlight|safe }}
{% if line_count|length and allLines != "" %}
{% endif %}
|
Thank you for using ShiftLeft Scan. Looking for a more detailed analysis? Check out Inspect, our next generation SAST product