Skip to content

Include analyzer metadata in the security report

Thiago Figueiró requested to merge report-analyzer-version into master

Why is this change being made?

While looking at scan statistics, I noticed that the majority of reports for container scanning were using version 3.0.0 of the schema.

This is incorrect, since this analyzer relies on fields that were added later.

As a first step, I've updated it to claim to support the latest, 14.0.3. This will be validated in an upcoming MR.

I also noticed that the analyzer version was missing, so I've added this property to the report.

Edited by Thiago Figueiró

Merge request reports