Custom Visual code scan

[venukurs]

Hi,

For one of our customer, we have imported following custom visuals from Microsoft AppSource.

1. Tachometer
2. Sunburst
3. HTMLViewer

As per the customer security requirements, any third-party custom visuals should follow Code Scan procedure hence requesting you to provide your feedback on the following queries.

1. How to extract the code for custom visuals (especially Tachometer, Sunburst and HTMLViewer) in order to scan code for internal security team acceptance.
2. Is there any way to scan the custom visual code to verify vulnerable issues, if yes then can you please suggest the tool that can support to scan the custom visuals.

[v-lionel-msft · Accepted solution]

Hi @venukurs ,

1. Modify the .pbix file to a .zip file.

What makes up a Power BI Desktop PBIX File 

2. Find the JSON files of the custom visuals.

3. Use code analysis tools to analyze code.

Maybe you can use Visual Studio.

Using the Code Analysis Tool 

Best regards,
Lionel Chen

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[lbendlin]

.pbiviz files are ZIP archives containing JSON files with the visual code.  Unpack and scan.

[venukurs]

Thank you for your response.

Can you plesae suggest a tool that support to scan json code.