topic Custom Visual code scan in Developer

Custom Visual code scan

venukurs — Wed, 12 Aug 2020 06:49:23 GMT

Hi,

For one of our customer, we have imported following custom visuals from Microsoft AppSource.

Tachometer
Sunburst
HTMLViewer

As per the customer security requirements, any third-party custom visuals should follow Code Scan procedure hence requesting you to provide your feedback on the following queries.

How to extract the code for custom visuals (especially Tachometer, Sunburst and HTMLViewer) in order to scan code for internal security team acceptance.
Is there any way to scan the custom visual code to verify vulnerable issues, if yes then can you please suggest the tool that can support to scan the custom visuals.

Re: Custom Visual code scan

lbendlin — Wed, 12 Aug 2020 23:36:58 GMT

.pbiviz files are ZIP archives containing JSON files with the visual code. Unpack and scan.

Re: Custom Visual code scan

venukurs — Thu, 13 Aug 2020 07:47:59 GMT

Thank you for your response.

Can you plesae suggest a tool that support to scan json code.

Re: Custom Visual code scan

v-lionel-msft — Fri, 14 Aug 2020 08:10:29 GMT

Hi @venukurs ,

1. Modify the .pbix file to a .zip file.

What makes up a Power BI Desktop PBIX File

2. Find the JSON files of the custom visuals.

3. Use code analysis tools to analyze code.

Maybe you can use Visual Studio.

Using the Code Analysis Tool

Best regards,
Lionel Chen

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.