oxsecurity / codetotal Goto Github PK

Add a button to easily share CodeTotal from the UI

Opening analysis dialog causes too many re-renders.
Consider splitting the report store into separate stores.

Once we scan a snippet we have no way to see again the content of this snippet

Maybe a click on the results page ?

Show the user the duration it took to perform the analysis

WebSocket connection does not close properly when navigating out of report page

Replace report header strip with a progress bar

After pasting url of a repo, when hitting ENTER on the keyboard, it should validate the form

To reproduce, run latest CodeTotal on repository https://github.com/eyalatox/req_only and show the results of secretlint or grype

Severity column has a carriage return whereas it shouldn't :/

cc @itayox

Switch sync to async calls.
packages/backend/src/megalinter/parsers/parse-sarif.ts

When selecting a python file, "language" is displayed empty

It should either not be displayed at all, or display "Python" :)

Change "Score" label to "Risk" since a clean analysis has either zero risk or a score of a 100 :)

In case of a repo -> open in a new tab
In case of a snippet/file -> show code dialog with highlighted row number

Current state
megalinter-complete signals the end of an analysis

Problem
Parsers didn't finish and the data isn't displayed to the user since the WS connection is closed

Solution
Wait for parsers to complete before marking the analysis as completed

The current parallel call of npm api for N packages triggers too many 429 and consume lots of CPU resources.

We need either to:

• Call npm api in bulk with a list of packages
• Define some "pool" to avoid to have more than 5 parallel api calls

Cleanup unused dependencies in package.json files

• Category: SBOM
• Policy Name: Unused direct dependency in code
• Application Name: oxsecurity/codetotal
• Fix Link:
• Click here to see details in OX App:

Issue Description:

Repo oxsecurity/codetotal has 14 dependencies that are not utilized. In other words, no functions or variables of the dependencies are used.

Recommendations:

It is best practise to remove dependencies that are not being used.

Aggregations:

SBOM results should allow to click to visit home page of a npm or a python package

Pypi package license is not displayed in SBOM results tab