Philipp/cve-differential
Public Access
1
0 Fork 0
generated from Philipp/template-git
Code Issues 1 Pull Requests 1 Actions Packages Releases 1 Activity

feat: initial commit of cve-differential action

Browse Source
This commit is contained in:
Philipp committed 2026-09-13 00:12:26 +02:00
commit bf996103f5
7 files changed
+651
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

markdown.tpl
+67
View File
@@ -0,0 +1,67 @@
### 🛡️ Security Scan Report
{{- range . }}
{{- $targetName := .Target }}
{{- if eq $targetName "" }}
{{- if eq .Type "gobinary" }}
{{- $targetName = "Go binary" }}
{{- else if .Type }}
{{- $targetName = .Type }}
{{- else if .Class }}
{{- $targetName = .Class }}
{{- else }}
{{- $targetName = "Application / Package" }}
{{- end }}
{{- end }}
{{- $hasFindings := false }}
{{- if .Vulnerabilities }}
{{- $hasFindings = true }}
#### Target: `{{ $targetName }}` (Vulnerabilities)
| Severity | CVE | Package | Installed | Fixed In | Title |
| :--- | :--- | :--- | :--- | :--- | :--- |
{{- $vulns := .Vulnerabilities }}
{{- range $sev := list "CRITICAL" "HIGH" "MEDIUM" "LOW" "UNKNOWN" }}
{{- range $vuln := $vulns }}
{{- if eq $vuln.Severity $sev }}
| {{ if eq $vuln.Severity "CRITICAL" }}🔴 CRITICAL{{ else if eq $vuln.Severity "HIGH" }}🟠 HIGH{{ else if eq $vuln.Severity "MEDIUM" }}🟡 MEDIUM{{ else if eq $vuln.Severity "LOW" }}🔵 LOW{{ else }}⚪ {{ $vuln.Severity }}{{ end }} | [{{ $vuln.VulnerabilityID }}]({{ $vuln.PrimaryURL }}) | `{{ $vuln.PkgName }}` | {{ $vuln.InstalledVersion }} | {{ default "-" $vuln.FixedVersion }} | {{ $vuln.Title }} |
{{- end }}
{{- end }}
{{- end }}
{{- end }}
{{- if .Misconfigurations }}
{{- $hasFindings = true }}
#### Target: `{{ $targetName }}` (Misconfigurations)
| Severity | Rule ID | Title | Message | Resolution |
| :--- | :--- | :--- | :--- | :--- |
{{- $misconfs := .Misconfigurations }}
{{- range $sev := list "CRITICAL" "HIGH" "MEDIUM" "LOW" "UNKNOWN" }}
{{- range $m := $misconfs }}
{{- if eq $m.Severity $sev }}
| {{ if eq $m.Severity "CRITICAL" }}🔴 CRITICAL{{ else if eq $m.Severity "HIGH" }}🟠 HIGH{{ else if eq $m.Severity "MEDIUM" }}🟡 MEDIUM{{ else if eq $m.Severity "LOW" }}🔵 LOW{{ else }}⚪ {{ $m.Severity }}{{ end }} | [{{ $m.ID }}]({{ $m.PrimaryURL }}) | {{ $m.Title }} | {{ $m.Message }} | {{ default "-" $m.Resolution }} |
{{- end }}
{{- end }}
{{- end }}
{{- end }}
{{- if .Secrets }}
{{- $hasFindings = true }}
#### Target: `{{ $targetName }}` (Secrets)
| Severity | Rule ID | Title | Lines |
| :--- | :--- | :--- | :--- |
{{- range .Secrets }}
| {{ if eq .Severity "CRITICAL" }}🔴 CRITICAL{{ else if eq .Severity "HIGH" }}🟠 HIGH{{ else if eq .Severity "MEDIUM" }}🟡 MEDIUM{{ else if eq .Severity "LOW" }}🔵 LOW{{ else }}⚪ {{ .Severity }}{{ end }} | {{ .RuleID }} | {{ .Title }} | L{{ .StartLine }}-L{{ .EndLine }} |
{{- end }}
{{- end }}
{{- if not $hasFindings }}
#### Target: `{{ $targetName }}`
✅ No security issues found.
{{- end }}
{{- end }}