diff --git a/dojo/tools/trivy/parser.py b/dojo/tools/trivy/parser.py index 0000c11c259..ba72f0f5b38 100644 --- a/dojo/tools/trivy/parser.py +++ b/dojo/tools/trivy/parser.py @@ -283,6 +283,15 @@ def get_result_items(self, test, results, service_name=None, artifact_name=""): file_path = target_target else: file_path = None + + epss_data = vuln.get("EPSS", None) + if epss_data is not None: + epss_score = epss_data.get("score", None) + epss_percentile = epss_data.get("percentile", None) + else: + epss_score = None + epss_percentile = None + except KeyError as exc: logger.warning("skip vulnerability due %r", exc) continue @@ -309,6 +318,8 @@ def get_result_items(self, test, results, service_name=None, artifact_name=""): title=title, cwe=cwe, severity=severity, + epss_score=epss_score, + epss_percentile=epss_percentile, file_path=file_path, references=references, description=description,