Trivy: feature request: junit output

[scbunn]

As I'm looking into integrating this into my CI pipelines, I'm looking for a way to present the findings to the user without having to troll the build logs. One mechanism that I was thinking about was to present this to a job as tests. Since most ecosystems support junit that seems like it would makes sense.

[knqyf263]

@scbunn Thank you for the suggestion. I didn't know that most ecosystems support junit xml.
I would like to support junit xml.

However, I have a lot of tasks currently. If someone is interested in this feature, please implement it.

[jeff-cook]

This would be great to have.

[strowi]

I would very much like the feature, since all our other ci-tests already support junit.

[jeff-cook]

I'm working on a template for junit.xml format. First time working with Go and Go templates. The gitlab.tpl is very helpful.

Any recommendation how to print an item and remove all double quotes?

[knqyf263]

@jeff-cook It's really helpful! I'm not sure exactly what you need, but the function might be useful.
https://golang.org/pkg/text/template/#example_Template_func

[rahul2393]

I am working on this issue, will create PR shortly

[knqyf263]

Trivy has supported JUnit output. It can be used in the next release. Thank you, @rahul2393.
https://github.com/aquasecurity/trivy#save-the-results-using-a-template

[knqyf263]

I released v0.9.2 including this feature.
https://github.com/aquasecurity/trivy/releases/tag/v0.9.2