Documentation / SwarmHack

Report Types

Report Types (the --report flag)

The parser dedupes tokens, rejects unknown tokens, treats none as exclusive, and promotes a bare sse to [sse, ocsf, html] so the SSE Markdown's evidence pointers resolve.

| Token | Effect | Output(s) |

| --- | --- | --- |

| ocsf | OCSF Vulnerability Finding JSON. | mission-….json |

| html | D3.js attack-path HTML. | mission-…-attack-path.html (+ .dot) |

| sse | Upsell-validated SSE Markdown. Auto-promotes to sse,ocsf,html. | mission-….sse.md (+ JSON + HTML) |

| none | Suppress all reports (debug). Exclusive — cannot combine. | (no files) |

Defaults: --report ocsf,html.

SSE delta is *not* a --report token — it is the --report argument of the standalone swarmhack scorecard subcommand and accepts only sse-delta.

ADR sources

  • ADR-SSE-025 — scorecard agent
  • ADR-SSE-026 — capability map
  • ADR-SSE-027 — upsell MD contract
  • ADR-SSE-028 — affected-scope rollup
  • ADR-SSE-029 — before / after delta

Example invocations

swarmhack spawn --target http://127.0.0.1:9999 --report ocsf,html --authz-doc lab.json
swarmhack spawn --target http://localhost:18080 --report sse --authz-doc lab.json
swarmhack scorecard --before reports/pre.json --after reports/post.json \
                    --report sse-delta -o reports/customer-delta.md