Skip to content

Conversation

JigyasuRajput
Copy link
Contributor

@JigyasuRajput JigyasuRajput commented Aug 20, 2025

Summary

This PR transforms the static HTML report into a dynamic, offline-capable application for vulnerability triage. It allows users to manage VEX data directly in their browser without requiring any backend, addressing a key goal of the VEX tooling GSoC project.

Key Features

  • Interactive Triage: Adds controls to each CVE row to set status, justification, and comments.
  • VEX Data Export/Import: Users can save their work as a CycloneDX VEX JSON file and load it back into the report to resume their session.
  • Updated Report Saving: Allows saving a new HTML file that includes the current triage state.
  • Auto-Save: Automatically saves progress to the browser's localStorage to prevent data loss on refresh.
  • Filtering: Adds controls to dynamically filter the view by CVE, component, or triage status.

How to Test

Generate a report using --format html and open the file in a browser to access the new interactive features.

@JigyasuRajput JigyasuRajput changed the title feat(html): add triage capabilities feat(html): add triage capabilities to HTML reports Aug 20, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant