Skip to content

[FEATURE] Decouple Reporting Tool From DockerSecurityScanner Class #107

Description

@DVentresco

Summary

Reporting and writing to a file only occurs if the full test suite is executed or if image scanning happens

Problem Statement

Reporting should be available when only AI analysis occurs with the CLI tool

Proposed Solution

The reporting functions internal to the DockerSecurityScanner should be removed and made globally available. This would allow reports to be generated with AI results only, not just an aggregation of AI and Scan results

Example Usage:

# How would this feature be used?
docksec  Dockerfile --ai-only 

Alternatives Considered

Any alternative approaches you've thought about.

Use Case

Who would benefit from this feature?

  • Individual developers
  • [ X ] DevOps teams
  • [ X ] Security teams
  • [ X ] CI/CD pipelines
  • Enterprise users
  • Other:

Acceptance Criteria

What does done look like?

  • Criteria 1
  • Criteria 2
  • Criteria 3

Implementation Ideas

Reporting is removed from the parent class and added as its own standalone function

# Pseudo-code or high-level ideas

Related Issues

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions