Skip to content

fix(output): include report.json and OA/DM panels in multi-folder HTML report - #938

Closed
RohithPariki wants to merge 1 commit into
OWASP:mainfrom
RohithPariki:fix-878
Closed

fix(output): include report.json and OA/DM panels in multi-folder HTML report#938
RohithPariki wants to merge 1 commit into
OWASP:mainfrom
RohithPariki:fix-878

Conversation

@RohithPariki

Copy link
Copy Markdown

Summary

Updates the multi-folder HTML reporter to generate the report.json data payload and aggregate override/maintenance findings, ensuring parity with the single-folder HTML report.

Problem

When running scans in multi-folder mode with --report, the generated HTML output was missing the embedded report.json payload. Additionally, it failed to render the override findings (OA) and maintenance risk (DM) panels, making the multi-folder dashboard incomplete compared to single-folder runs.

Root Cause

The writeMultiFolderHtmlReport function was not explicitly accumulating and passing the overrideFindings and maintenanceFindings arrays from the individual subfolder scan results into the HTML generation template, nor was it embedding the serialized report.json data.

Solution

  • Aggregated overrideFindings and maintenanceFindings across all MultiFolderScanResult objects.
  • Passed these aggregated arrays down to the HTML template renderer.
  • Updated the HTML output payload to include the serialized report.json data block for multi-folder runs.

Testing & Verification

  • Verified that running cve-lite . --report in a multi-folder workspace now successfully generates the report.json script tag in the HTML.
  • Confirmed that override and maintenance panels correctly display aggregated results across all scanned folders.
  • Ran the full npm test suite to ensure no regressions in output or reporter logic.

References

Closes #878

@sonukapoor

Copy link
Copy Markdown
Collaborator

Thanks @RohithPariki. This overlaps #901, which is already open and implementing the multi-folder report.json + OA/DM panels. To keep priority with the original author I will close this as a duplicate - but if you would like to help, reviewing or testing #901 would be genuinely useful.

@sonukapoor sonukapoor closed this Aug 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

bug: multi-folder --report omits report.json and never renders override/maintenance panels

2 participants