secreport 0.3.0

Output formatters for security findings — JSON, JSONL, SARIF, Markdown, Text
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62

use secfinding::{Reportable, Severity};
use secreport::{render_any, Format};

struct ApiFinding {
    endpoint: String,
    title: String,
    severity: Severity,
}

impl Reportable for ApiFinding {
    fn scanner(&self) -> &str {
        "api-audit"
    }
    fn target(&self) -> &str {
        &self.endpoint
    }
    fn severity(&self) -> Severity {
        self.severity
    }
    fn title(&self) -> &str {
        &self.title
    }
    fn detail(&self) -> &str {
        "Custom type rendered through secreport::render_any."
    }
    fn cwe_ids(&self) -> &[std::sync::Arc<str>] {
        &[]
    }
    fn cve_ids(&self) -> &[std::sync::Arc<str>] {
        &[]
    }
    fn tags(&self) -> &[std::sync::Arc<str>] {
        &[]
    }
    fn confidence(&self) -> Option<f64> {
        Some(0.87)
    }
}

fn main() {
    let findings = vec![
        ApiFinding {
            endpoint: "https://example.com/profile".into(),
            title: "Reflected XSS".into(),
            severity: Severity::High,
        },
        ApiFinding {
            endpoint: "https://example.com/admin".into(),
            title: "Missing authorization".into(),
            severity: Severity::Critical,
        },
    ];

    println!(
        "{}",
        render_any(&findings, Format::Text, "api-audit").unwrap()
    );
    println!(
        "{}",
        render_any(&findings, Format::Sarif, "api-audit").unwrap()
    );
}