Granular Results returned after a scan.

[ssulei7]

Hey all,

I have been using this particular action for awhile now for scanning applications across my stack. One thing that I would like to see is the ability to generate more granular results as to what the vulnerabilities entail. Right now, this is the only data that is returned when running my scans:

{
    "vulnerabilities": {
        "HIGH": 6,
        "MEDIUM": 163,
        "LOW": 205,
        "INFORMATIONAL": 1
    }
}

Ideally, I would also like to see the detail of each of those vulnerabilities... in which I can pull down into my BI solutions.

[ssulei7]

@ckearney-r7 any insights into this?

[ckearney-r7]

I think something like this is on the roadmap @ssulei7 , I will speak with the product manager to confirm.

[ssulei7]

@ckearney-r7 Please do! Right now we're put in a position where we need to leverage the search API to tieback to the most recent scan to dump a JSON payload into storage for our BI solutions.

[rmccrory-r7]

Hey @ssulei7, I work on the Rapid7 PM team and we have added this as an item to review. Could you also raise this with your Rapid7 account team (Customer Success/Account Executive) We like to keep IDEA's tracked from those teams, so we can have better communication links with various people involved.

[ssulei7]

@rmccrory-r7 I let my customer know to reach out to their customer success and account executive. Ideally, we would like to see this completed by end of this quarter to avoid having to implement any custom scripting. :)