Security MCP Server

{{- /* Template based on https://docs.gitlab.com/ee/user/application_security/container_scanning/#reports-json-format */ -}} { "version": "2.3", "vulnerabilities": [ {{- $t_first := true }} {{- range . }} {{- $target := .Target }} {{- range .Vulnerabilities -}} {{- if $t_first -}} {{- $t_first = false -}} {{ else -}} , {{- end }} { "id": "{{ .VulnerabilityID }}", "category": "container_scanning", "message": {{ .Title | printf "%q" }}, "description": {{ .Description | printf "%q" }}, {{- /* cve is a deprecated key, use id instead */}} "cve": "{{ .VulnerabilityID }}", "severity": {{ if eq .Severity "UNKNOWN" -}} "Unknown" {{- else if eq .Severity "LOW" -}} "Low" {{- else if eq .Severity "MEDIUM" -}} "Medium" {{- else if eq .Severity "HIGH" -}} "High" {{- else if eq .Severity "CRITICAL" -}} "Critical" {{- else -}} "{{ .Severity }}" {{- end }}, {{- /* TODO: Define confidence */}} "confidence": "Unknown", "solution": {{ if .FixedVersion -}} "Upgrade {{ .PkgName }} to {{ .FixedVersion }}" {{- else -}} "No solution provided" {{- end }}, "scanner": { "id": "trivy", "name": "trivy" }, "location": { "dependency": { "package": { "name": "{{ .PkgName }}" }, "version": "{{ .InstalledVersion }}" }, {{- /* TODO: No mapping available - https://github.com/aquasecurity/trivy/issues/332 */}} "operating_system": "Unknown", "image": "{{ $target }}" }, "identifiers": [ { {{- /* TODO: Type not extractable - https://github.com/aquasecurity/trivy-db/pull/24 */}} "type": "cve", "name": "{{ .VulnerabilityID }}", "value": "{{ .VulnerabilityID }}", "url": "{{ .PrimaryURL }}" } ], "links": [ {{- $l_first := true -}} {{- range .References -}} {{- if $l_first -}} {{- $l_first = false }} {{- else -}} , {{- end -}} { "url": "{{ . }}" } {{- end }} ] } {{- end -}} {{- end }} ], "remediations": [] }