Report readability: Usage section

[andresriancho]

One of the findings is titled MySQL port open to all:

The Usage section is empty, meaning that (I assumed but had to confirm) the security group is not used anywhere.

In order to ease the report review, it would be nice to see "No usages of this security group were found" in that section. It makes it explicit and easier to understand.

Also, if the SG is insecure (mysql open to all) but is not in use, then its risk should be warning instead of danger.

[x4v13r64]

I agree, the UI is not very verbose and in many cases (as this one) it should be more explicit.

As for the second point that would be complicated due to how findings are implemented in Scout2, but could be done by having 2 rules.