Executive Summary

{{ job.grade or '?' }}

Grade

{{ '%.1f' % job.score_pct if job.score_pct is not none else '—' }}%

Compliance Score

{% set meta = [ ('Target', job.image_id or job.target_host or '—'), ('Provider', (job.provider or '—') | upper), ('Region', job.region or '—'), ('Profile', job.profile_name or '—'), ('Scan Date', job.updated_at.strftime('%Y-%m-%d') if job.updated_at else '—'), ('Job ID', job.id[:16] ~ '…'), ] %} {% for label, value in meta %}

{{ label }}

{{ value }}

{% endfor %}

Risk Score

Compliance {{ '%.1f' % job.score_pct if job.score_pct is not none else '0.0' }}%

0% — Non-Compliant 40% F 60% D 75% C 90% B 100% A

{% if job.severity_counts %}

Severity Breakdown

{% set sev_styles = [ ('critical', 'Critical', 'border-rose-700/60 bg-rose-950/30 text-rose-400'), ('high', 'High', 'border-orange-700/60 bg-orange-950/30 text-orange-400'), ('medium', 'Medium', 'border-yellow-700/60 bg-yellow-950/30 text-yellow-400'), ('low', 'Low', 'border-slate-600/60 bg-slate-900/40 text-slate-400'), ] %} {% for key, label, style in sev_styles %}

{{ job.severity_counts.get(key, 0) }}

{{ label }}

failed findings

{% endfor %}

{% endif %} {% if job.results %} {% set findings = job.results.get('findings', job.results.get('rules', [])) %} {% set passed = findings | selectattr('status', 'in', ['pass']) | list | length if 'findings' in job.results else job.results.get('counts', {}).get('pass', 0) %} {% set failed_list = findings | selectattr('status', 'equalto', 'fail') | list if 'findings' in job.results else findings | selectattr('result', 'equalto', 'fail') | list %} {% set excepts = findings | selectattr('status', 'equalto', 'approved_exception') | list %}

Findings Summary

{{ job.results.get('passed', passed) }}

Passed

{{ job.results.get('failed', failed_list | length) }}

Failed

{{ excepts | length }}

Approved Exceptions

{% set critical_high = failed_list | selectattr('severity', 'in', ['critical', 'high']) | list if failed_list else [] %} {% if critical_high %}

Critical & High Findings

{% for f in critical_high %} {% endfor %}

Rule ID	Title	Severity
{{ (f.rule_id or f.id or '—') | replace('xccdf_org.ssgproject.content_rule_', '') }}	{{ f.get('title', f.get('rule_id', f.get('id', '—'))) | replace('xccdf_org.ssgproject.content_rule_', '') }}	{{ f.severity or '—' }}

{% endif %} {% set med_low = failed_list | rejectattr('severity', 'in', ['critical', 'high']) | list if failed_list else [] %} {% if med_low %}

Medium & Low Findings ({{ med_low | length }})

{% for f in med_low %} {% endfor %}

Rule ID	Severity
{{ (f.rule_id or f.id or '—') | replace('xccdf_org.ssgproject.content_rule_', '') }}	{{ f.severity or 'low' }}

{% endif %} {% if excepts %}

Approved Exceptions

{% for f in excepts %} {% endfor %}

Rule ID	Justification
{{ (f.rule_id or '—') | replace('xccdf_org.ssgproject.content_rule_', '') }}	{{ f.get('justification', 'Override applied in blueprint') }}

{% endif %} {% endif %}{# end if job.results #}

Scan Metadata

{% set meta_rows = [ ('Job ID', job.id), ('Job Type', job.job_type or 'image_scan'), ('Image / Target', job.image_id or job.target_host or '—'), ('Provider', job.provider or '—'), ('Region', job.region or '—'), ('Profile', job.profile_name or '—'), ('Scan Started', job.created_at.strftime('%Y-%m-%d %H:%M UTC') if job.created_at else '—'), ('Scan Completed', job.updated_at.strftime('%Y-%m-%d %H:%M UTC') if job.updated_at else '—'), ] %} {% for label, value in meta_rows %}

{{ label }}: {{ value }}

{% endfor %}