Skip to content

fix: multi-folder --report writes report.json and OA/DM panels - #901

Open
Ayush7614 wants to merge 1 commit into
OWASP:mainfrom
Ayush7614:fix/multi-folder-report-parity
Open

fix: multi-folder --report writes report.json and OA/DM panels#901
Ayush7614 wants to merge 1 commit into
OWASP:mainfrom
Ayush7614:fix/multi-folder-report-parity

Conversation

@Ayush7614

@Ayush7614 Ayush7614 commented Jul 27, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • Multi-folder --report now writes report.json alongside index.html, matching single-folder artifact shape.
  • Override hygiene and maintenance-risk panels render per folder when --check-overrides / --check-maintenance are set (including empty-state reassurance).
  • report.json tags OA/DM findings with subfolder; docs note the multi-folder parity.

Fixes #878

Test plan

  • npm test -- tests/multi-folder-html-reporter.test.ts (8 tests)
  • npm run build
  • Manual: monorepo with ≥2 nested lockfiles, cve-lite . --check-overrides --check-maintenance --report ./cve-report --no-openindex.html + report.json, HTML includes Override hygiene / Maintenance risk when findings exist

Multi-folder HTML reports previously only emitted index.html and never
rendered override/maintenance sections even when those checks ran.
Parity with single-folder: both artifacts plus per-folder OA/DM panels.

Fixes OWASP#878
@Ayush7614
Ayush7614 requested a review from sonukapoor as a code owner July 27, 2026 19:04
@Ayush7614

Copy link
Copy Markdown
Collaborator Author

cc: @sonukapoor

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

bug: multi-folder --report omits report.json and never renders override/maintenance panels

1 participant