AttackSurfaceAnalyzer icon indicating copy to clipboard operation
AttackSurfaceAnalyzer copied to clipboard

Add Export Sarif Button to GUI

Open jbuettner00 opened this issue 2 years ago • 5 comments

It would be nice to be able export the entire analysis report to a single HTML file, or other browser format, so that it can be passed to anyone and they can open it in any web browser and see the results without having to look through the json file or create a tool to parse the json file or have access to the original instance of the ASA where the report was created.

Option to select to export ASA report to an HTML

Describe alternatives you've considered The alternative is creating a tool to parse the json and display it in a useful visual format or zipping up the entire instance of the ASA where the report was created and attaching it where others can download it to see the report. Another alternative is to use the browser's Save As feature to save the current data in the page to an html file, the issue with this is you only get the data for the current page of the report that you are on so you would have to save a file for every page which is not very useful when there are 30+ pages of data in the report.

System Configuration (please complete the following information):

  • OS: Windows 11
  • OS Version: Windows 11 Enterprise version 21H2
  • Application Version: 2.3.299
  • CLI or GUI: both

Additional context N/A

jbuettner00 avatar Aug 25 '23 15:08 jbuettner00

ASA supports exporting the report as Sarif which has a number of view clients available (including the sarif web component: https://microsoft.github.io/sarif-web-component/)

Have you tried with the sarif format report?

gfs avatar Aug 25 '23 20:08 gfs

I have not tried the sarif export, I wasn't aware of that. So is it only available to be export from the asa command line parameters?

jbuettner00 avatar Aug 25 '23 20:08 jbuettner00

Yes, I believe you can only export sarif from the command line currently. I can take a look at adding a sarif export button for the GUI as well. Thanks for the feedback.

gfs avatar Aug 25 '23 22:08 gfs

Thanks, I looked at the sarif export and this will work for us.

jbuettner00 avatar Aug 28 '23 15:08 jbuettner00

Keeping this issue open to track potentially adding a sarif export button to the GUI.

gfs avatar Sep 05 '23 18:09 gfs