Skip to content

Comments

feat: analysis results browsing, --object flag, improved object list (v0.2.0)#6

Open
giovannialberto wants to merge 5 commits intomainfrom
feat/analysis-results
Open

feat: analysis results browsing, --object flag, improved object list (v0.2.0)#6
giovannialberto wants to merge 5 commits intomainfrom
feat/analysis-results

Conversation

@giovannialberto
Copy link
Member

Summary

This PR adds the ability to browse scan analysis results directly from the CLI, adds an --object shortcut flag to all scan commands, and improves the object list display.

New commands

  • scan overview — summary of all analyses with finding counts by severity (critical, high, medium, low)
  • scan results --analysis <TYPE> — browse findings for any analysis type with pagination (--page, --per-page) and search (--search). Supports all 12 analysis types: cve, password-hash, malware, hardening, capabilities, crypto, software-bom, kernel, info, symbols, tasks, stack-overflow
  • scan cra — view CRA (Cyber Resilience Act) compliance check results inline with pass/fail/not-applicable status per requirement

Improvements

  • --object flag on all scan commands — instead of looking up a scan ID first, pass --object <OBJECT_ID> and the CLI resolves the most recent scan automatically. Works on: status, score, overview, results, cra, report, sbom, cra-report
  • Object list redesign — UUIDs no longer wrap across lines (were impossible to copy); tags displayed as colored [brackets] below the name
  • -O/--output for report/sbom/cra-report (frees -o for --object)

Output

All new commands support --format json for machine-readable output alongside the default human-friendly colored display.

Changes

  • src/client/models.rs — 440+ lines of new API models (ScanOverview, AnalysisResults, 11 finding types, CRA models, AnalysisType enum)
  • src/client/mod.rs — 3 new client methods (get_scan_overview, get_analysis_results, get_cra_compliance)
  • src/commands/scan.rs — 520+ lines: resolve_scan_id helper, run_overview, run_results, run_cra, 11 type-specific renderers
  • src/commands/object.rs — redesigned plain-text object list
  • src/main.rs — 3 new subcommands, --object/--scan on 8 existing commands
  • src/output.rs — severity_cell, bool_cell, cra_status_cell helpers
  • Cargo.toml — version bump to 0.2.0
  • README.md — full documentation update

All changes tested against the live Analyzer API.

@giovannialberto giovannialberto requested a review from krsh February 23, 2026 09:15
@giovannialberto giovannialberto force-pushed the feat/analysis-results branch 2 times, most recently from 06fcb19 to 881366d Compare February 23, 2026 10:04
…c compliance

New commands:
- scan overview: summary of all analyses with finding counts by severity
- scan results: browse findings for any analysis type (CVE, malware,
  hardening, capabilities, crypto, software-bom, kernel, password-hash,
  info, symbols, tasks) with pagination and search
- scan compliance --type <TYPE>: view compliance check results for any
  supported standard (cra, red33). Replaces the old scan cra command.
- scan compliance-report --type <TYPE>: download compliance report PDF.
  Replaces the old scan cra-report command.

Improvements:
- All scan commands now accept --object as alternative to --scan,
  automatically resolving the object's most recent scan
- All output uses consistent plain formatted style with colored,
  fixed-width columns
- -O/--output for report/sbom/compliance-report (frees -o for --object)
- Removed comfy-table dependency

Version bumped to 0.2.0. README updated with full documentation.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants