diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index fda20828aa6f0d49220fb737c03388b80f412dca..8d2967bd53003de3a3fe5af5efce1ee91e6f443e 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -12,6 +12,7 @@ vulnerability-scan: stage: "test" script: - "ci-tools/vulnerability-scan security-report.json" + - "ci-tools/count-vulnerabilities <security-report.json" artifacts: paths: - "security-report.json" diff --git a/ci-tools/count-vulnerabilities b/ci-tools/count-vulnerabilities new file mode 100755 index 0000000000000000000000000000000000000000..9db1c5e7e3aa756dc5b151fbcc30bc4572dd1eba --- /dev/null +++ b/ci-tools/count-vulnerabilities @@ -0,0 +1,14 @@ +#!/usr/bin/env python3 + +from sys import stdin +from json import load + +def main(): + vulnix_report = load(stdin) + print("Vulnerable packages: {}".format(len(vulnix_report))) + print("Vulnerability count: {}".format( + len(set(sum((deriv["affected_by"] for deriv in vulnix_report), []))), + )) + +if __name__ == '__main__': + main()