Feature Request: --json to format output as JSON to stdout for easier use with ansible

It would be very handy for automation if the output could be formatted as a json document by adding “–json” to the command.

Perhaps something like:

[
{
  "id" : "Scanner"
  "version": "1.6.3"
  "scan_path":"/path/to/start"
   "files": {
        "cve1": [ "pathtojar","pathtojar2"... ] 
         "cve2": [ "pathtootherjar", ... ]
        "permissions": [ "pathtounreadable", "pathtounreadable2" ... ] 
   }
   "scanned_count": 2000
   "vuln_count": 3
   "perm_count": 10
   "mitigated_count": 5
   "exitcode": 1
}
]

(apologies for any syntax errors, this is an ad-hoc example.)

[Afrouper]

I’ve made a first suggestion (see PR). The output is:

{ “files”: [ { “path”: “/opt/log4j/log4j-core-2.14.0.jar”, “entry”: “”, “product”: “Log4j 2”, “hostname”: “saturn.space”, “cve”: “CVE-2021-44228”, “fixed”: false, “detectedAt”: “2021-12-19 22:44:09”, “version”: “2.14.0” } ], “metrics”: { “scanFileCount”: 54, “fixedFileCount”: 0, “lastStatusLoggingTime”: 1639950249455, “statusReporting”: false, “lastVisitDirectory”: “/opt/log4j”, “scanDirCount”: 1, “lastStatusLoggingCount”: 0, “scanStartTime”: 1639950249455, “errorCount”: 0 } }

[xeraph]

@jlellis @strawgate Just released v2.4.0. Would you test --report-json option? See also https://github.com/logpresso/CVE-2021-44228-Scanner/wiki/JSON-Report-Sample