Json output change array name

[hijak]

Hi

Having the image as the array name in the json output makes it difficult for me to automate html from the json output using something like mustache

can we have the image key (and maybe some more kewl infos) seperate to the vunerablities array?

[knqyf263]

@hijak Thank you for the report. I know that problem. What format is easy to use? Let me know a sample of JSON.

[hijak]

Hi

Thanks for getting back to me something like the following layout would be useful to me at least

{
  "Image": "image/name",
  "OSversion": "alpine 3.8.2",
  "applicationType": "symfony", <--- not sure if this is possible but i see you can do app depenancy scanning
  "Vulnerabilities": [
    {
      "VulnerabilityID": "",
      "PkgName": "",
      "InstalledVersion": "",
      "FixedVersion": "",
      "Title": "",
      "Description": "",
      "Severity": "",
      "References": []
    }]
}

[knqyf263]

@hijak Thanks for suggesting the format. There may be multiple lock files. So, it needs to be an array or map.
How about the following format?

[
  {
    "Target": "image/name (alpine 3.8.2)",
    "Vulnerabilities": [
      {
        "VulnerabilityID": "",
        "PkgName": "",
        "InstalledVersion": "",
        "FixedVersion": "",
        "Title": "",
        "Description": "",
        "Severity": "",
        "References": []
      }
    ]
  },
  {
    "Target": "/app/Gemfile.lock",
    "Vulnerabilities": [
      {
        "VulnerabilityID": "",
        "PkgName": "",
        "InstalledVersion": "",
        "FixedVersion": "",
        "Title": "",
        "Description": "",
        "Severity": "",
        "References": []
      }
    ]
  }
]

[hijak]

ah yes this is cool as long as im able to predict the name of the array with the list of vuns inside it im happy