ZZUS3CU / FIELD NOTES← Back to selected work
07 / VULNERABILITY-SCAN-PARSER / OPEN SOURCE

vulnerability-scan-parser

Move scan output toward a report a team can use.

A reporting utility for turning machine output into reviewable security evidence.

Project contextOpen-source security reporting / data transformationEvidencePublic repository available
01 / The problem

Move scan output toward a report a team can use.

Large scan JSON is difficult to review directly; security teams need normalized evidence and an actionable report shape.

Role & responsibility

Built the parser, integration path and automated reporting workflow documented by the project.

Verified result

The repository and local test data provide the available proof; the under-three-minute claim is not independently generalized here.

02 / Solution

Architecture & workflow

JSON input is normalized by a Python parser, enriched through an API integration and transformed into a review-oriented report.

Technical implementation

  • Mapped large scan structures into a smaller report model.
  • Kept parsing and reporting concerns separate.
  • Documented supported inputs and local test data in the repository.

Key engineering decisions

  • Preserve evidence context while reducing report noise.
  • Treat timing claims as repository/test evidence rather than universal guarantees.

Completed deliverables

  • JSON parser
  • API integration
  • Automated report generation
  • Local test data and repository documentation

Technology stack

PythonJSONAPI integrationReporting automation
Public repository availablePublic repository is the source of truth for input formats, tests and limitations.

Have a hard problem? Start with the constraint.

Start a conversation ↗