assign findings to elements

[nineinchnick]

Assign findings to elements to allow to render them in reports grouped by assets/dataflows.

[ghost]

DeepCode's analysis on #b1e001 found:

4 minor issues. ✔️ 1 issue were fixed.

👉 View analysis in DeepCode’s Dashboard

☺️ If you want to provide feedback on our bot, here is how to contact us.

[nineinchnick]

Here's an example template. Pretty ugly but works:

## Findings

{elements:repeat:{{item.findings:if:
### {{item.name}}

{{item.findings:repeat:
**Threat**: {{{{item.id}}}} - {{{{item.description}}}}

**Severity**: {{{{item.severity}}}}

**Types**: {{{{item.categories}}}}

**References**: {{{{item.references}}}}

}}}}}

Finding properties need to be double escaped since there are two loops, hence four brackets. Fortunately the if doesn't add another level of escaping. There are five closing brackets at the end since two close the inner loop, next two the if and last one closes outer loop.

I think this is as far as this templating system should be taken but grouping by asset/dataflow should make it easier to manage large number of findings.

[izar]

this one looks good - can you add a sample template ?

[nineinchnick]

Done!