add file location info to CVE scan report (#632)

* add file location info to CVE scan report

* add file location info to CVE scan report

Author: naushniki

jenkins/helper/generate_cve_report.py

@@ -73,6 +73,7 @@
         <th>Artifact type</th>
         <th>Artifact version</th>
         <th>Fixed version(s)</th>
+        <th>Locations(s)</th>
         <tbody id="table-body">
             {% for scan in scans %}
             {% for vulnerability in scan.vulnerabilities %}
@@ -88,6 +89,11 @@
                 <td>{{ vulnerability.artifact_type }}</td>
                 <td>{{ vulnerability.artifact_version }}</td>
                 <td>{{ vulnerability.fixed_versions }}</td>
+                <td>
+                {% for location in vulnerability.locations %}
+                    {{ location.path }}<br>
+                {% endfor %}
+                </td>
             </tr>
             {% endif %}
             {% endfor %}
@@ -104,6 +110,7 @@
         <th>Artifact type</th>
         <th>Artifact version</th>
         <th>Fixed version(s)</th>
+        <th>Locations(s)</th>
         <tbody id="table-body">
             {% for scan in scans %}
             {% for vulnerability in scan.vulnerabilities %}
@@ -122,6 +129,11 @@
                 <td>{{ vulnerability.artifact_type }}</td>
                 <td>{{ vulnerability.artifact_version }}</td>
                 <td>{{ vulnerability.fixed_versions }}</td>
+                <td>
+                {% for location in vulnerability.locations %}
+                    {{ location.path }}<br>
+                {% endfor %}
+                </td>
             </tr>
             {% endfor %}
             {% endfor %}
@@ -200,6 +212,7 @@
         vulnerability_entry["fixed_versions"] = "<br>".join(
             vulnerability.get("fix", {}).get("versions", [])
         )
+        vulnerability_entry["locations"] = artifact.get("locations", [])
         table_entry["vulnerabilities"].append(vulnerability_entry)
     table_entry["vulnerabilities"] = sorted(
         table_entry["vulnerabilities"],