Viewing Code Vulnerability Scan Results

Overview

Learn how to view scan results, analyze vulnerabilities, and track security risk from the DeepTraQ dashboard.

This section helps you:

• Navigate scan result views
• Understand vulnerability findings
• Filter and search results
• Perform triage actions
• Track trends over time
• Download reports for stakeholders

Embed Storylane walkthrough video here.

---

Prerequisites

• At least one completed Code Vulnerability Scan
• Access to the Code Vulnerabilities dashboard

---

Steps to View Scan Results

1. Navigate to Code Vulnerabilities → Projects
2. Select the scan project (e.g., Chef Demo Scan)
3. Click the project name to open scan results
4. You will land on the Vulnerabilities tab by default

---

Scan Result Tabs

Each scan provides multiple views for analysis:

1. Vulnerabilities (Default View)

• Displays all detected vulnerabilities
• Includes severity, affected components, and file paths
• Primary workspace for analysis and triage

---

2. Summary

• High-level overview of security posture

• Includes:

  • Vulnerability distribution
  • Severity breakdown
  • Key insights

---

3. Triage

• Manage vulnerability decisions

• Track:

  • Accepted risks
  • False positives
  • Comments and discussions

---

4. History

• Track scan results over time
• Compare previous scans
• Identify trends and regressions
• Access past scan executions

---

Filtering & Search

Use filters to quickly narrow down results:

• Search Bar → Find vulnerabilities by name or keywords
• Search Libraries Filter → Focus on specific components
• Previous Scans Filter → View findings from earlier scans

Click Apply to update results.

---

Viewing Vulnerability Details

1. Click on a vulnerability
2. Select Details

You can view:

• Description
• Severity
• Affected components
• Mitigation steps
• References
• Classification data

---

CVE Intelligence

Click on a CVE ID to access complete vulnerability intelligence in one place.

This includes:

• Detailed description
• Affected versions
• Severity scoring
• Classification (CWE, etc.)
• Exploit availability

No need to navigate external sources.

---

Triage Actions

Take action directly on vulnerabilities:

• Accept Risk → Mark as acknowledged with justification
• Mark as False Positive → Exclude invalid findings
• Add Comments → Collaborate with your team

These actions help prioritize and manage risk effectively.

---

Tracking Trends & History

• Navigate to the History tab

• Select a previous scan to compare results

• Analyze:

  • Vulnerability trends
  • Fix progress
  • New vs existing issues

---

Troubleshooting Scan Issues

• Review scan execution logs in the History tab
• Investigate failed jobs and error details
• Use logs to identify root cause and resolution steps

Refer to the troubleshooting guide for detailed steps.

---

Downloading Reports

To share results:

1. Click the Download button
2. Select report type and format
3. Export the report

Reports include:

• Vulnerability details
• Severity classification
• Remediation guidance

---

Field Reference

Field	Description	Example
Vulnerabilities	List of detected issues	CVE-2023-1234
Summary	High-level scan insights	Severity distribution
Triage	Risk decisions and comments	Accepted Risk
History	Previous scan results	Scan on Jan 10
Search Bar	Keyword-based filtering	log4j
Filters	Narrow down vulnerability results	Library filter
CVE ID	Opens detailed vulnerability data	CVE-2021-44228
Download	Export scan report	PDF

---

Related Articles

• Creating a Code Vulnerability Scan
• Understanding Code Scan Findings
• Troubleshooting Failed Scan Jobs
• Downloading and Sharing Reports
• Managing Vulnerabilities