diff --git a/docs/README.md b/docs/README.md
index cecad54..29ca85b 100644
--- a/docs/README.md
+++ b/docs/README.md
@@ -27,7 +27,7 @@ npm install
- Start the development server
```bash
-yarn start
+npm start
```
- Navigate to [http://localhost:3000](http://localhost:3000) for accessing the `vet` documentation locally
diff --git a/docs/docs/advanced/allow-list-deny-list.md b/docs/docs/advanced/allow-list-deny-list.md
index c1593c1..21874b4 100644
--- a/docs/docs/advanced/allow-list-deny-list.md
+++ b/docs/docs/advanced/allow-list-deny-list.md
@@ -1,6 +1,7 @@
---
sidebar_position: 6
title: π« Allow & Deny List
+draft: true
---
# π« Vet - Allow & Deny List
diff --git a/docs/docs/configure.md b/docs/docs/configure.md
index 4c4c813..19ac224 100644
--- a/docs/docs/configure.md
+++ b/docs/docs/configure.md
@@ -1,54 +1,13 @@
---
sidebar_position: 4
title: 𧩠Configuration
+draft: true
---
# 𧩠Configuring Vet
`vet` comes with super powers π, this section will help you to understand and explore some of them so that you can take your open source security to next level π
-
-
-## API Key
-
-`vet` uses control plane API for the insights required to enrich the information of dependencies, and its information.
-
-### Generating an API key
-
-- You can run the following command with your email address to receive an API key. After running the following command, you will receive an email with the API key.
-
-```bash
-vet auth trial --email john.doe@example.com
-```
-
-
-
-### Configuring an API key
-
-- You can configure the api key using the following command
-
-```bash
-vet auth configure
-```
-
-
-
-- You can also pass the API key through environment variable using the variable `VET_API_KEY`
-
-### Renewing an API key
-
-- To renew an API key, you can re-register using the email. Even reach out to us at [contact@safedep.io](mailto:contact@safedep.io) and we would be happy to work with you
-
-## Using Community Mode
-
-- You can use community endpoint for Insights API without API key
-
-```bash
-vet auth configure --community
-```
-
-- For CI job, set environment variable `VET_COMMUNITY_MODE=true` to enable community runtime mode
-
## Scanning
### Scanning Directories
diff --git a/docs/docs/ecosystem/artifactory.md b/docs/docs/ecosystem/artifactory.md
index fd960c4..2db7f78 100644
--- a/docs/docs/ecosystem/artifactory.md
+++ b/docs/docs/ecosystem/artifactory.md
@@ -1,3 +1,7 @@
+---
+draft: true
+---
+
# Artifactory Systems
π§ Work-in-Progress (WIP)
diff --git a/docs/docs/ecosystem/developer-tooling.md b/docs/docs/ecosystem/developer-tooling.md
index 95f6ca1..128af6a 100644
--- a/docs/docs/ecosystem/developer-tooling.md
+++ b/docs/docs/ecosystem/developer-tooling.md
@@ -1,3 +1,7 @@
+---
+draft: true
+---
+
# Developer Tooling
π§ Work-in-Progress (WIP)
diff --git a/docs/docs/ecosystem/gateways.md b/docs/docs/ecosystem/gateways.md
index 9443894..8fdb7dc 100644
--- a/docs/docs/ecosystem/gateways.md
+++ b/docs/docs/ecosystem/gateways.md
@@ -1,3 +1,8 @@
+---
+draft: true
+---
+
+
# Gateways
π§ Work-in-Progress (WIP)
diff --git a/docs/docs/ecosystem/ide.md b/docs/docs/ecosystem/ide.md
index 7e004ba..655070e 100644
--- a/docs/docs/ecosystem/ide.md
+++ b/docs/docs/ecosystem/ide.md
@@ -1,3 +1,7 @@
+---
+draft: true
+---
+
# IDE
π§ Work-in-Progress (WIP)
diff --git a/docs/docs/ecosystem/integrations.md b/docs/docs/ecosystem/integrations.md
index c2ba3ad..549ecd5 100644
--- a/docs/docs/ecosystem/integrations.md
+++ b/docs/docs/ecosystem/integrations.md
@@ -1,3 +1,7 @@
+---
+draft: true
+---
+
# Integrations
π§ Work-in-Progress (WIP)
diff --git a/docs/docs/ecosystem/logging.md b/docs/docs/ecosystem/logging.md
index 76d25a8..3da8841 100644
--- a/docs/docs/ecosystem/logging.md
+++ b/docs/docs/ecosystem/logging.md
@@ -1,3 +1,7 @@
+---
+draft: true
+---
+
# Logging & Monitoring Systems
π§ Work-in-Progress (WIP)
diff --git a/docs/docs/ecosystem/serivce-mesh.md b/docs/docs/ecosystem/serivce-mesh.md
index 8c67906..b789961 100644
--- a/docs/docs/ecosystem/serivce-mesh.md
+++ b/docs/docs/ecosystem/serivce-mesh.md
@@ -1,3 +1,7 @@
+---
+draft: true
+---
+
# Service Mesh
π§ Work-in-Progress (WIP)
diff --git a/docs/docs/ecosystem/systems.md b/docs/docs/ecosystem/systems.md
index ed1398f..139ce26 100644
--- a/docs/docs/ecosystem/systems.md
+++ b/docs/docs/ecosystem/systems.md
@@ -1,3 +1,7 @@
+---
+draft: true
+---
+
# Systems & Solutions
π§ Work-in-Progress (WIP)
diff --git a/docs/docs/faq.md b/docs/docs/faq.md
index dfdf02b..3f45ee4 100644
--- a/docs/docs/faq.md
+++ b/docs/docs/faq.md
@@ -9,15 +9,6 @@ title: π FAQ
- Set environment variable `VET_DISABLE_BANNER=1`
-### Can I use this tool without an API Key for Insight Service?
-
-- Probably no. All useful data (enrichments) for a detected package comes from
-a backend service. The service is rate limited with quotas to prevent abuse.
-
-- Look at `api/insights-v1.yml`. It contains the contract expected for Insights
-API. You can perhaps consider rolling out your own to avoid dependency with our
-backend.
-
### Something is wrong! How do I debug this thing?
- Run without the eye candy UI and enable log to file or to `stdout`.
diff --git a/docs/docs/guides/dependency-cost.md b/docs/docs/guides/dependency-cost.md
index 5f779e1..056044f 100644
--- a/docs/docs/guides/dependency-cost.md
+++ b/docs/docs/guides/dependency-cost.md
@@ -1 +1,5 @@
+---
+draft: true
+---
+
# Dependency Cost
diff --git a/docs/docs/guides/dependency-inventory.md b/docs/docs/guides/dependency-inventory.md
index 1d97c01..65a0e45 100644
--- a/docs/docs/guides/dependency-inventory.md
+++ b/docs/docs/guides/dependency-inventory.md
@@ -1 +1,5 @@
+---
+draft: true
+---
+
# Dependency Inventory
diff --git a/docs/docs/guides/dependency-scanning.md b/docs/docs/guides/dependency-scanning.md
index d6ef3fe..a52ac97 100644
--- a/docs/docs/guides/dependency-scanning.md
+++ b/docs/docs/guides/dependency-scanning.md
@@ -1 +1,5 @@
+---
+draft: true
+---
+
# Dependency Scanning
diff --git a/docs/docs/guides/drift-analysis.md b/docs/docs/guides/drift-analysis.md
index fed9915..7683713 100644
--- a/docs/docs/guides/drift-analysis.md
+++ b/docs/docs/guides/drift-analysis.md
@@ -1 +1,5 @@
+---
+draft: true
+---
+
# Drift Analysis
diff --git a/docs/docs/guides/github-code-scanning.md b/docs/docs/guides/github-code-scanning.md
new file mode 100644
index 0000000..515faef
--- /dev/null
+++ b/docs/docs/guides/github-code-scanning.md
@@ -0,0 +1,63 @@
+---
+sidebar_position: 1
+title: π§ͺ GitHub Code Scanning
+---
+
+# GitHub Code Scanning Integration
+
+GitHub supports [uploading SARIF](https://docs.github.com/en/code-security/code-scanning/integrating-with-code-scanning/sarif-support-for-code-scanning)
+reports to enable repository and organization-wide visibility of security
+events across different tools. `vet` supports exporting policy violation
+reports as [SARIF](#) which can be uploaded to GitHub.
+
+## Using SARIF Reports
+
+To generate a SARIF report, use the `vet` command with the `--report-sarif` flag:
+
+```shell
+vet scan -D /path/to/project --report-sarif /path/to/report.sarif
+```
+
+## GitHub Action
+
+`vet` has a GitHub Action to easy integration. Refer to [vet GitHub
+Action](../integrations/github-actions.md) for more details. The action
+produces a SARIF report which can be uploaded to GitHub.
+
+Invoke `vet-action` to run `vet` in GitHub
+
+```yaml
+- name: Run vet
+ id: vet
+ permissions:
+ contents: read
+ issues: write
+ pull-requests: write
+ uses: safedep/vet-action@v1
+ env:
+ GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+```
+
+Upload the SARIF report to GitHub
+
+```yaml
+- name: Upload SARIF
+ uses: github/codeql-action/upload-sarif@v3
+ with:
+ sarif_file: ${{ steps.vet.outputs.report }}
+ category: vet
+```
+
+[Full Example](https://github.com/safedep/vet-action/blob/main/example/vet-ci.yml)
+
+**Note:** `vet` will only include policy violations in the SARIF report.
+A policy must be provided to `vet` using `--filter` or `--filter-suite` flag
+during scan. This is automatically included if you are using `vet-action`.
+
+## GitHub Code Scanning Alerts
+
+Once the SARIF report is uploaded to GitHub, policy violations will be
+available in the GitHub Security tab. This provides a centralized view of
+policy violations across different repositories.
+
+
diff --git a/docs/docs/guides/health-status.md b/docs/docs/guides/health-status.md
index 4da6020..76823cc 100644
--- a/docs/docs/guides/health-status.md
+++ b/docs/docs/guides/health-status.md
@@ -1 +1,5 @@
+---
+draft: true
+---
+
# Health Status
diff --git a/docs/docs/guides/licenses-scanning.md b/docs/docs/guides/licenses-scanning.md
index e3ef917..0e5096c 100644
--- a/docs/docs/guides/licenses-scanning.md
+++ b/docs/docs/guides/licenses-scanning.md
@@ -1 +1,5 @@
+---
+draft: true
+---
+
# License Scanning
diff --git a/docs/docs/index.md b/docs/docs/index.md
index 85e2d56..1302f37 100644
--- a/docs/docs/index.md
+++ b/docs/docs/index.md
@@ -12,56 +12,24 @@ title: π Welcome
`vet` is a tool for identifying risks in open source software supply chain. It helps engineering and security teams to identify potential issues in their open source dependencies and evaluate them against organizational policies.
-```bash
- β― vet
-
- .----------------. .----------------. .----------------.
-| .--------------. || .--------------. || .--------------. |
-| | ____ ____ | || | _________ | || | _________ | |
-| ||_ _| |_ _| | || | |_ ___ | | || | | _ _ | | |
-| | \ \ / / | || | | |_ \_| | || | |_/ | | \_| | |
-| | \ \ / / | || | | _| _ | || | | | | |
-| | \ ' / | || | _| |___/ | | || | _| |_ | |
-| | \_/ | || | |_________| | || | |_____| | |
-| | | || | | || | | |
-| '--------------' || '--------------' || '--------------' |
- '----------------' '----------------' '----------------'
-
-[ Establish trust in open source software supply chain ]
-
-Usage:
- vet [OPTIONS] COMMAND [ARG...] [flags]
- vet [command]
-
-Available Commands:
- auth Configure and verify Insights API authentication
- completion Generate the autocompletion script for the specified shell
- help Help about any command
- query Query JSON dump and run filters or render reports
- scan Scan and analyse package manifests
- version Show version and build information
-
-Flags:
- -d, --debug Show debug logs
- -e, --exceptions string Load exceptions from file
- -h, --help help for vet
- -l, --log string Write command logs to file
- -v, --verbose Show verbose logs
-
-Use "vet [command] --help" for more information about a command.
-```
-
## π€ Why vet?
-> It has been estimated that Free and Open Source Software (FOSS) constitutes 70-90% of any given piece of modern software solutions.
+> It has been estimated that Free and Open Source Software (FOSS) constitutes 70-90% of any given piece of modern software solutions.
+> [Source](https://www.linuxfoundation.org/blog/blog/a-summary-of-census-ii-open-source-software-application-libraries-the-world-depends-on)
+
+Industry dependency on OSS will only increase. We need better tooling to help
+engineering and security teams to safely consume OSS components.
### π Problem space
-Product security practices target software developed and deployed internally. They do not cover software consumed from external sources in form of libraries from the Open Source ecosystem. The growing risk of vulnerable, unmaintained and malicious dependencies establishes the need for product security teams to vet 3rd party dependencies before consumption.
+
+Product security practices secure software developed and deployed internally. They do not cover software consumed from external sources in form of libraries from the Open Source ecosystem. The growing risk of vulnerable, unmaintained and malicious dependencies establishes the need for product security teams to vet 3rd party dependencies before consumption.
### π Current state
+
Vetting open source packages is largely a manual and opinionated process involving engineering teams as the requester and security teams as the service provider. A typical OSS vetting process involves auditing dependencies to ensure security, popularity, license compliance, trusted publisher etc. The manual nature of this activity increases cycle time and slows down engineering velocity, especially for evolving products.
### π What vet aims to solve
+
`vet` solves the problem of OSS dependency vetting by providing a policy driven automated analysis of libraries. It can be seamlessly integrated with any CI tool or used in developer / security engineer's local environment.
## π€© Vet in Action
diff --git a/docs/docs/installation.mdx b/docs/docs/installation.mdx
index 251488a..f4c4503 100644
--- a/docs/docs/installation.mdx
+++ b/docs/docs/installation.mdx
@@ -1,7 +1,7 @@
---
sidebar_position: 3
slug: /installation
-title: β‘ Installation
+title: β‘Installation
---
# β‘ Installing Vet
@@ -28,25 +28,25 @@ import TabItem from '@theme/TabItem';
- curl -L https://github.com/safedep/vet/releases/download/v1.5.8/vet_Linux_x86_64.tar.gz -o vet.tar.gz
+ curl -L https://github.com/safedep/vet/releases/download/v1.6.0/vet_Linux_x86_64.tar.gz -o vet.tar.gz
- curl -L https://github.com/safedep/vet/releases/download/v1.5.8/vet_Darwin_arm64.tar.gz -o vet.tar.gz
+ curl -L https://github.com/safedep/vet/releases/download/v1.6.0/vet_Darwin_arm64.tar.gz -o vet.tar.gz
- curl -L https://github.com/safedep/vet/releases/download/v1.5.8/vet_Darwin_x86_64.tar.gz -o vet.tar.gz
+ curl -L https://github.com/safedep/vet/releases/download/v1.6.0/vet_Darwin_x86_64.tar.gz -o vet.tar.gz
- TBD
+ go install github.com/safedep/vet@latest
diff --git a/docs/docs/integrations/aws-codebuild.md b/docs/docs/integrations/aws-codebuild.md
index 7c9d573..1b3985a 100644
--- a/docs/docs/integrations/aws-codebuild.md
+++ b/docs/docs/integrations/aws-codebuild.md
@@ -1,6 +1,7 @@
---
sidebar_position: 6
title: π AWS CodeBuild
+draft: true
---
# π AWS CodeBuild Workflow - Vet
diff --git a/docs/docs/integrations/bitbucket-pipelines.md b/docs/docs/integrations/bitbucket-pipelines.md
index e33495e..27a8f8f 100644
--- a/docs/docs/integrations/bitbucket-pipelines.md
+++ b/docs/docs/integrations/bitbucket-pipelines.md
@@ -1,6 +1,7 @@
---
sidebar_position: 5
title: π Bitbucket Pipelines
+draft: true
---
# π Bitbucket Pipelines Workflow - Vet
diff --git a/docs/docs/integrations/circle-ci.md b/docs/docs/integrations/circle-ci.md
index c42eca0..008310b 100644
--- a/docs/docs/integrations/circle-ci.md
+++ b/docs/docs/integrations/circle-ci.md
@@ -1,6 +1,7 @@
---
sidebar_position: 3
title: π Circle CI
+draft: true
---
# π Circle CI Workflow - Vet
diff --git a/docs/docs/integrations/github-actions.md b/docs/docs/integrations/github-actions.md
index a6434a5..79488b5 100644
--- a/docs/docs/integrations/github-actions.md
+++ b/docs/docs/integrations/github-actions.md
@@ -5,77 +5,16 @@ title: π Github Actions
# π Github Actions Workflow - Vet
-- Make sure to get the registration key as `VET_INSIGHTS_API_KEY` and store in the Github Secrets of the repository
+`vet` supports first class integration with GitHub using a custom GitHub
+action. Use [vet-action](https://github.com/safedep/vet-action) to seamlessly
+integrate `vet` in your GitHub repositories.
-
+[Example workflow](https://github.com/safedep/vet-action/blob/main/example/vet-ci.yml)
-- The following is the Github actions workflow file
+## Demo
-```yml title=".github/workflows/vet.yml"
-name: OSS Vet
-on:
- pull_request:
- types: [opened, synchronize, reopened]
- branches: [ main ]
+[Example PR Integration](https://github.com/safedep/demo-client-java/pull/6)
-jobs:
- vet:
- name: Vet OSS Security
- runs-on: ubuntu-latest
- steps:
- - uses: actions/checkout@v2
+
- - name: Run Vet
- run: |
- docker run \
- -u $(id -u ${USER}):$(id -g ${USER}) \
- -e VET_INSIGHTS_API_KEY=${{ secrets.VET_INSIGHTS_API_KEY }} \
- -v `pwd`:/code \
- ghcr.io/safedep/vet:latest \
- scan -s -D /code \
- --exceptions /code/.vet/exceptions.yml \
- --filter-suite /code/.vet/oss-risk-pack.yml \
- --filter-fail \
- --report-markdown=/code/vet.md
- - name: Add Vet Report to Summary
- run: cat vet.md >> $GITHUB_STEP_SUMMARY
-```
-- The policy pack applied is as following [OSS Best Practices](../packs/oss-risk-pack.md)
-
-:::tip
-
-- We have many policy packs available at [Query Packs](../packs/safedep-pack.md)
-- You can also write your custom policy as a code, refer to [PaaC](../advanced/polic-as-code.md)
-
-:::
-
-```yml title=".vet/oss-risk-pack.yml"
-name: General Purpose OSS Best Practices
-description: |
- This filter suite contains rules for implementing general purpose OSS
- consumption best practices for an organization.
-filters:
- - name: critical-or-high-vulns
- value: |
- vulns.critical.exists(p, true) || vulns.high.exists(p, true)
- - name: low-popularity
- value: |
- projects.exists(p, (p.type == "GITHUB") && (p.stars < 10))
- - name: risky-oss-licenses
- value: |
- licenses.exists(p, p == "GPL-2.0") ||
- licenses.exists(p, p == "GPL-3.0")
- - name: ossf-unmaintained
- value: |
- scorecard.scores["Maintained"] == 0
- - name: ossf-dangerous-workflow
- value: |
- scorecard.scores["Dangerous-Workflow"] == 0
-```
-
-## π Real-world example of vet in action
-
-- The following is the example of how `vet` can be leveraged to enable security guardrails for your pipelines and continuous workflows using security packs [https://github.com/safedep/demo-client-java/pull/2](https://github.com/safedep/demo-client-java/actions/runs/4249672653/jobs/7390102023) for an insecure dependency
-
-
diff --git a/docs/docs/integrations/jenkins.md b/docs/docs/integrations/jenkins.md
index ab7e9f7..d600d35 100644
--- a/docs/docs/integrations/jenkins.md
+++ b/docs/docs/integrations/jenkins.md
@@ -1,6 +1,7 @@
---
sidebar_position: 4
title: π Jenkins CI
+draft: true
---
# π Jenkins CI Workflow - Vet
diff --git a/docs/docs/integrations/travis-ci.md b/docs/docs/integrations/travis-ci.md
index e795992..975e41a 100644
--- a/docs/docs/integrations/travis-ci.md
+++ b/docs/docs/integrations/travis-ci.md
@@ -1,6 +1,7 @@
---
sidebar_position: 5
title: π Travis CI
+draft: true
---
# π Travis CI Workflow - Vet
diff --git a/docs/docs/packs/cis-pack.md b/docs/docs/packs/cis-pack.md
index 71d523d..95c4f3a 100644
--- a/docs/docs/packs/cis-pack.md
+++ b/docs/docs/packs/cis-pack.md
@@ -1,6 +1,7 @@
---
sidebar_position: 2
title: π§° CIS Benchmarks
+draft: true
---
# π§° CIS Benchmarks
@@ -10,7 +11,7 @@ The following policy geared towards the CIS benchmarks based guidelines towards
```yaml title="cis-risk-pack.yaml"
name: CIS Benchmarks Security Risks & Best Practices
description: |
- This filter suite contains rules for implementing based on CIS benchmarks
+ This filter suite contains rules for implementing based on CIS benchmarks
and best practices for an organization.
filters:
- name: critical-or-high-vulns
diff --git a/docs/docs/packs/mitre-pack.md b/docs/docs/packs/mitre-pack.md
index 62d6c33..7981c9e 100644
--- a/docs/docs/packs/mitre-pack.md
+++ b/docs/docs/packs/mitre-pack.md
@@ -1,6 +1,7 @@
---
sidebar_position: 5
title: π§° MITRE
+draft: true
---
# π§° MITRE Best Practices
diff --git a/docs/docs/packs/openssf-pack.md b/docs/docs/packs/openssf-pack.md
index c4554bc..ce32fcf 100644
--- a/docs/docs/packs/openssf-pack.md
+++ b/docs/docs/packs/openssf-pack.md
@@ -1,6 +1,7 @@
---
sidebar_position: 3
title: π§° OpenSSF Scorecard
+draft: true
---
# π§° OpenSSF Scorecard
diff --git a/docs/docs/packs/oss-risk-pack.md b/docs/docs/packs/oss-risk-pack.md
index 5279cda..41fe6a0 100644
--- a/docs/docs/packs/oss-risk-pack.md
+++ b/docs/docs/packs/oss-risk-pack.md
@@ -1,6 +1,7 @@
---
sidebar_position: 1
title: π§° OSS Best Practices
+draft: true
---
# π§° OSS Best Practices
diff --git a/docs/docs/packs/safedep-pack.md b/docs/docs/packs/safedep-pack.md
index 69b50a4..e53925f 100644
--- a/docs/docs/packs/safedep-pack.md
+++ b/docs/docs/packs/safedep-pack.md
@@ -1,6 +1,7 @@
---
sidebar_position: 6
title: π§° SafeDep
+draft: true
---
# π§° SafeDep Best Practices
diff --git a/docs/docs/packs/slsa-pack.md b/docs/docs/packs/slsa-pack.md
index cb04592..8118eb0 100644
--- a/docs/docs/packs/slsa-pack.md
+++ b/docs/docs/packs/slsa-pack.md
@@ -1,6 +1,7 @@
---
sidebar_position: 4
title: π§° SLSA
+draft: true
---
# π§° SLSA Best Practices
diff --git a/docs/docs/quick-start.md b/docs/docs/quick-start.md
index a0eb952..9cc7685 100644
--- a/docs/docs/quick-start.md
+++ b/docs/docs/quick-start.md
@@ -7,8 +7,6 @@ title: π Quick Start
- Download the binary file for your operating system/architecture from the [Official GitHub Releases](https://github.com/safedep/vet/releases) or look at [different installation options](installation.mdx).
-
-
- Run `vet` to identify risks
```bash
diff --git a/docs/docs/reporting.md b/docs/docs/reporting.md
index 1d6e8a4..b1114cb 100644
--- a/docs/docs/reporting.md
+++ b/docs/docs/reporting.md
@@ -30,306 +30,6 @@ may change without notice.
vet scan --report-json /path/to/report.json -D demo-client-java
```
-## Console
-
-- You can run the console output format for the `vet` using `--report-console` flag. Which returns the whole report of the scan in detailed format in the terminal or console.
-
-```bash
-vet scan --report-console -D demo-client-java
-```
-
-```bash
- β― vet scan --report-console -D demo-client-java
-Scanning packages ... 95.7% [######################.] [110 in 6.401304s]
-Scanning manifests ... 0.0% [.......................] [0 in 6.401344s]
-Manifest: /Users/madhuakula/vet/demo-client-java/gradle.lockfile
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ¬βββββββββββββββββ¬ββββββββββββββββββββ
-β PACKAGE β ATTRIBUTE β SUMMARY β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β antlr:antlr/2.7.7 β β β
-β β Version Drift β 2.7.7 > 20030911 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β com.fasterxml.jackson.core:jackson-databind/2.13.4 β β β
-β β Vulnerability β Critical:0 High:1 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β com.sun.activation:jakarta.activation/1.2.2 β β β
-β β Version Drift β 1.2.2 > 2.0.1 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β com.sun.istack:istack-commons-runtime/3.0.12 β β β
-β β Low Popularity β Stars:9 Issues:2 β
-β β Version Drift β 3.0.12 > 4.1.1 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β com.zaxxer:HikariCP/4.0.3 β β β
-β β Version Drift β 4.0.3 > 5.0.1 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β commons-fileupload:commons-fileupload/1.4 β β β
-β β Vulnerability β Critical:0 High:1 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β io.github.openfeign:feign-core/11.8 β β β
-β β Version Drift β 11.8 > 12.2 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β io.github.openfeign:feign-slf4j/11.8 β β β
-β β Version Drift β 11.8 > 12.2 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β io.github.resilience4j:resilience4j-annotations/1.7.0 β β β
-β β Version Drift β 1.7.0 > 2.0.2 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β io.github.resilience4j:resilience4j-circuitbreaker/1.7.0 β β β
-β β Version Drift β 1.7.0 > 2.0.2 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β io.github.resilience4j:resilience4j-circularbuffer/1.7.0 β β β
-β β Version Drift β 1.7.0 > 2.0.2 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β io.github.resilience4j:resilience4j-consumer/1.7.0 β β β
-β β Version Drift β 1.7.0 > 2.0.2 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β io.github.resilience4j:resilience4j-core/1.7.0 β β β
-β β Version Drift β 1.7.0 > 2.0.2 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β io.github.resilience4j:resilience4j-framework-common/1.7.0 β β β
-β β Version Drift β 1.7.0 > 2.0.2 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β io.github.resilience4j:resilience4j-micrometer/1.7.0 β β β
-β β Version Drift β 1.7.0 > 2.0.2 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β io.github.resilience4j:resilience4j-ratelimiter/1.7.0 β β β
-β β Version Drift β 1.7.0 > 2.0.2 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β io.github.resilience4j:resilience4j-retry/1.7.0 β β β
-β β Version Drift β 1.7.0 > 2.0.2 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β io.github.resilience4j:resilience4j-spring-boot2/1.7.0 β β β
-β β Version Drift β 1.7.0 > 2.0.2 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β io.github.resilience4j:resilience4j-spring/1.7.0 β β β
-β β Version Drift β 1.7.0 > 2.0.2 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β io.github.resilience4j:resilience4j-timelimiter/1.7.0 β β β
-β β Version Drift β 1.7.0 > 2.0.2 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β jakarta.annotation:jakarta.annotation-api/1.3.5 β β β
-β β Version Drift β 1.3.5 > 2.1.1 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β jakarta.persistence:jakarta.persistence-api/2.2.3 β β β
-β β Version Drift β 2.2.3 > 3.1.0 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β jakarta.transaction:jakarta.transaction-api/1.3.3 β β β
-β β Version Drift β 1.3.3 > 2.0.1 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β jakarta.validation:jakarta.validation-api/2.0.2 β β β
-β β Version Drift β 2.0.2 > 3.0.2 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β jakarta.xml.bind:jakarta.xml.bind-api/2.3.3 β β β
-β β Version Drift β 2.3.3 > 4.0.0 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β net.minidev:json-smart/2.4.8 β β β
-β β Vulnerability β Critical:0 High:1 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.apache.tomcat.embed:tomcat-embed-core/9.0.65 β β β
-β β Version Drift β 9.0.65 > 10.1.7 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.apache.tomcat.embed:tomcat-embed-el/9.0.65 β β β
-β β Version Drift β 9.0.65 > 10.1.7 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.apache.tomcat.embed:tomcat-embed-websocket/9.0.65 β β β
-β β Version Drift β 9.0.65 > 10.1.7 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.glassfish.jaxb:jaxb-runtime/2.3.6 β β β
-β β Version Drift β 2.3.6 > 4.0.2 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.glassfish.jaxb:txw2/2.3.6 β β β
-β β Version Drift β 2.3.6 > 4.0.2 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.slf4j:jul-to-slf4j/1.7.36 β β β
-β β Version Drift β 1.7.36 > 2.0.7 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.slf4j:slf4j-api/1.7.36 β β β
-β β Version Drift β 1.7.36 > 2.0.7 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.boot:spring-boot-autoconfigure/2.7.4 β β β
-β β Version Drift β 2.7.4 > 3.0.4 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.boot:spring-boot-configuration-processor/2.7.4 β β β
-β β Version Drift β 2.7.4 > 3.0.4 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.boot:spring-boot-devtools/2.7.4 β β β
-β β Version Drift β 2.7.4 > 3.0.4 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.boot:spring-boot-starter-aop/2.7.4 β β β
-β β Version Drift β 2.7.4 > 3.0.4 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.boot:spring-boot-starter-data-jpa/2.7.4 β β β
-β β Version Drift β 2.7.4 > 3.0.4 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.boot:spring-boot-starter-data-rest/2.7.4 β β β
-β β Version Drift β 2.7.4 > 3.0.4 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.boot:spring-boot-starter-jdbc/2.7.4 β β β
-β β Version Drift β 2.7.4 > 3.0.4 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.boot:spring-boot-starter-json/2.7.4 β β β
-β β Version Drift β 2.7.4 > 3.0.4 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.boot:spring-boot-starter-logging/2.7.4 β β β
-β β Version Drift β 2.7.4 > 3.0.4 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.boot:spring-boot-starter-oauth2-resource-server/2.7.4 β β β
-β β Version Drift β 2.7.4 > 3.0.4 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.boot:spring-boot-starter-security/2.7.4 β β β
-β β Version Drift β 2.7.4 > 3.0.4 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.boot:spring-boot-starter-tomcat/2.7.4 β β β
-β β Version Drift β 2.7.4 > 3.0.4 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.boot:spring-boot-starter-validation/2.7.4 β β β
-β β Version Drift β 2.7.4 > 3.0.4 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.boot:spring-boot-starter-web/2.7.4 β β β
-β β Version Drift β 2.7.4 > 3.0.4 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.boot:spring-boot-starter/2.7.4 β β β
-β β Version Drift β 2.7.4 > 3.0.4 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.boot:spring-boot/2.7.4 β β β
-β β Version Drift β 2.7.4 > 3.0.4 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.cloud:spring-cloud-circuitbreaker-resilience4j/2.1.4 β β β
-β β Version Drift β 2.1.4 > 3.0.0 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.cloud:spring-cloud-commons/3.1.4 β β β
-β β Version Drift β 3.1.4 > 4.0.1 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.cloud:spring-cloud-context/3.1.4 β β β
-β β Version Drift β 3.1.4 > 4.0.1 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.cloud:spring-cloud-openfeign-core/3.1.4 β β β
-β β Version Drift β 3.1.4 > 4.0.1 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.cloud:spring-cloud-starter-circuitbreaker-resilience4j/2.1.4 β β β
-β β Version Drift β 2.1.4 > 3.0.0 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.cloud:spring-cloud-starter-openfeign/3.1.4 β β β
-β β Version Drift β 3.1.4 > 4.0.1 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.cloud:spring-cloud-starter/3.1.4 β β β
-β β Version Drift β 3.1.4 > 4.0.1 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.data:spring-data-commons/2.7.3 β β β
-β β Version Drift β 2.7.3 > 3.0.4 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.data:spring-data-jpa/2.7.3 β β β
-β β Version Drift β 2.7.3 > 3.0.4 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.data:spring-data-rest-core/3.7.3 β β β
-β β Version Drift β 3.7.3 > 4.0.4 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.data:spring-data-rest-webmvc/3.7.3 β β β
-β β Version Drift β 3.7.3 > 4.0.4 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.hateoas:spring-hateoas/1.5.2 β β β
-β β Version Drift β 1.5.2 > 2.0.3 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.security:spring-security-config/5.7.3 β β β
-β β Version Drift β 5.7.3 > 6.0.2 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.security:spring-security-core/5.7.3 β β β
-β β Vulnerability β Critical:1 High:0 β
-β β Version Drift β 5.7.3 > 6.0.2 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.security:spring-security-crypto/5.7.3 β β β
-β β Version Drift β 5.7.3 > 6.0.2 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.security:spring-security-oauth2-core/5.7.3 β β β
-β β Version Drift β 5.7.3 > 6.0.2 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.security:spring-security-oauth2-jose/5.7.3 β β β
-β β Version Drift β 5.7.3 > 6.0.2 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.security:spring-security-oauth2-resource-server/5.7.3 β β β
-β β Version Drift β 5.7.3 > 6.0.2 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework.security:spring-security-web/5.7.3 β β β
-β β Version Drift β 5.7.3 > 6.0.2 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework:spring-aop/5.3.23 β β β
-β β Version Drift β 5.3.23 > 6.0.7 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework:spring-aspects/5.3.23 β β β
-β β Version Drift β 5.3.23 > 6.0.7 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework:spring-beans/5.3.23 β β β
-β β Version Drift β 5.3.23 > 6.0.7 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework:spring-context/5.3.23 β β β
-β β Version Drift β 5.3.23 > 6.0.7 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework:spring-core/5.3.23 β β β
-β β Version Drift β 5.3.23 > 6.0.7 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework:spring-expression/5.3.23 β β β
-β β Version Drift β 5.3.23 > 6.0.7 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework:spring-jcl/5.3.23 β β β
-β β Version Drift β 5.3.23 > 6.0.7 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework:spring-jdbc/5.3.23 β β β
-β β Version Drift β 5.3.23 > 6.0.7 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework:spring-orm/5.3.23 β β β
-β β Version Drift β 5.3.23 > 6.0.7 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework:spring-tx/5.3.23 β β β
-β β Version Drift β 5.3.23 > 6.0.7 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework:spring-web/5.3.23 β β β
-β β Version Drift β 5.3.23 > 6.0.7 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.springframework:spring-webmvc/5.3.23 β β β
-β β Version Drift β 5.3.23 > 6.0.7 β
-ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌβββββββββββββββββΌββββββββββββββββββββ€
-β org.yaml:snakeyaml/1.30 β β β
-β β Vulnerability β Critical:0 High:2 β
-Scanning packages ... done! [115 in 6.422s]
-Scanning manifests ... done! [1 in 6.422s]
- ** Summary of Findings
-
- ** 1 critical, 5 high and 5 other vulnerabilities were identified
-
- ** 1 potentially unpopular library identified as direct dependency
-
- ** 78 libraries are out of date with major version drift in direct dependencies
-
- ** across 115 libraries in 1 manifest(s)
-
-Consider upgrading the following libraries for maximum impact:
-
-βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ¬ββββββββββββ¬βββββββββ
-β PACKAGE β UPDATE TO β IMPACT β
-βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌββββββββββββΌβββββββββ€
-β org.yaml:snakeyaml@1.30 β 2.0 β 13 β
-β vulnerability drift β β β
-βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌββββββββββββΌβββββββββ€
-β org.springframework.security:spring-security-core@5.7.3 β 6.0.2 β 7 β
-β vulnerability drift β β β
-βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌββββββββββββΌβββββββββ€
-β com.sun.istack:istack-commons-runtime@3.0.12 β 4.1.1 β 4 β
-β low popularity drift β β β
-βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌββββββββββββΌβββββββββ€
-β commons-fileupload:commons-fileupload@1.4 β 1.5 β 3 β
-β vulnerability β β β
-βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββΌββββββββββββΌβββββββββ€
-β net.minidev:json-smart@2.4.8 β 2.4.10 β 3 β
-β vulnerability β β β
-βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ΄ββββββββββββ΄βββββββββ
-
-There are 77 more libraries that should be upgraded to reduce risk
-Run vet with `--report-markdown=/path/to/report.md` for details
-
-Run with `vet --filter="..."` for custom filters to identify risky libraries
-For more details https://github.com/safedep/vet
-```
-
## Markdown
- You can run the Markdown output format for the `vet` using `--report-markdown` flag. Which it generates consolidated markdown report to file.
@@ -342,8 +42,16 @@ vet scan --report-markdown=vet-markdown-report.md -D demo-client-java
## SARIF
-π§ Work-in-Progress (WIP)
+- You can run the SARIF output format for the `vet` using `--report-sarif` flag. Which it generates consolidated SARIF report to file.
+
+```bash
+vet scan --report-sarif=vet-sarif-report.sarif -D demo-client-java
+```
## CSV
-π§ Work-in-Progress (WIP)
+- You can run the CSV output format for the `vet` using `--report-csv` flag.
+
+```bash
+vet scan --report-csv=vet-csv-report.csv -D demo-client-java
+```
diff --git a/docs/docs/scenarios/intentional-vulnerabilities-backdoors.md b/docs/docs/scenarios/intentional-vulnerabilities-backdoors.md
index b24adde..6a3b158 100644
--- a/docs/docs/scenarios/intentional-vulnerabilities-backdoors.md
+++ b/docs/docs/scenarios/intentional-vulnerabilities-backdoors.md
@@ -1 +1,5 @@
+---
+draft: true
+---
+
# Intentional vulnerabilities and backdoors
diff --git a/docs/docs/scenarios/mitigating-dependency-confusion.md b/docs/docs/scenarios/mitigating-dependency-confusion.md
index e1f6ad8..ec3f8bb 100644
--- a/docs/docs/scenarios/mitigating-dependency-confusion.md
+++ b/docs/docs/scenarios/mitigating-dependency-confusion.md
@@ -1,3 +1,7 @@
+---
+draft: true
+---
+
# Dependency Confusion - package substitution attacks
:::info
diff --git a/docs/docs/scenarios/typosquatting.md b/docs/docs/scenarios/typosquatting.md
index 992ef31..8fcd3d2 100644
--- a/docs/docs/scenarios/typosquatting.md
+++ b/docs/docs/scenarios/typosquatting.md
@@ -1,3 +1,7 @@
+---
+draft: true
+---
+
# Typosquatting
-A malicious actor creates a malicious package that is similar in name to a popular OSS component to trick developers into downloading it
+A malicious actor creates a malicious package that is similar in name to a popular OSS component to trick developers into downloading it
diff --git a/docs/docs/scenarios/vulnerability-not-fixed-by-upstream-maintainer-in-desired-timeframe.md b/docs/docs/scenarios/vulnerability-not-fixed-by-upstream-maintainer-in-desired-timeframe.md
index 74929c8..c74f723 100644
--- a/docs/docs/scenarios/vulnerability-not-fixed-by-upstream-maintainer-in-desired-timeframe.md
+++ b/docs/docs/scenarios/vulnerability-not-fixed-by-upstream-maintainer-in-desired-timeframe.md
@@ -1 +1,5 @@
+---
+draft: true
+---
+
# Vulnerability not fixed by upstream maintainer in desired timeframe
diff --git a/docs/static/img/vet-github-action-pr.png b/docs/static/img/vet-github-action-pr.png
new file mode 100644
index 0000000..3ca147d
Binary files /dev/null and b/docs/static/img/vet-github-action-pr.png differ
diff --git a/docs/static/img/vet-github-code-scanning-alerts.png b/docs/static/img/vet-github-code-scanning-alerts.png
new file mode 100644
index 0000000..cacc57a
Binary files /dev/null and b/docs/static/img/vet-github-code-scanning-alerts.png differ