forkless/strix
1
0
Fork 0
mirror of https://github.com/usestrix/strix.git synced 2026-08-17 17:30:27 +02:00
Code Issues Packages Projects Releases Wiki Activity

cli: render contextual CVSS vector, advisory score, and reasoning for dependency findings

Browse Source
This commit is contained in:
Ahmed Allam
2026-08-17 09:59:57 +00:00
parent e82ee2c31e
commit 1ec146d809
1 changed files with 21 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
strix/interface/utils.py
+21
View File
@@ -133,6 +133,27 @@ def format_vulnerability_report(report: dict[str, Any]) -> Text: # noqa: PLR091
text.append("CVSS Vector: ", style=field_style)
text.append("/".join(cvss_parts), style="dim")
dependency_metadata = report.get("dependency_metadata") or {}
if dependency_metadata:
contextual_vector = dependency_metadata.get("contextual_cvss_vector")
if contextual_vector:
text.append("\n\n")
text.append("Contextual CVSS Vector: ", style=field_style)
text.append(contextual_vector, style="dim")
advisory_cvss = dependency_metadata.get("advisory_cvss")
if advisory_cvss is not None and advisory_cvss != report.get("cvss"):
text.append("\n\n")
text.append("Advisory CVSS: ", style=field_style)
text.append(f"{float(advisory_cvss):.1f}", style="dim")
contextual_reasoning = dependency_metadata.get("contextual_cvss_reasoning")
if contextual_reasoning:
text.append("\n\n")
text.append("Contextual CVSS Reasoning", style=field_style)
text.append("\n")
text.append(contextual_reasoning)
description = report.get("description")
if description:
text.append("\n\n")