cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
Highlighted
New Member

Custom Visual code scan

Hi,

 

For one of our customer, we have imported following custom visuals from Microsoft AppSource.

 

  1. Tachometer
  2. Sunburst
  3. HTMLViewer

 

As per the customer security requirements, any third-party custom visuals should follow Code Scan procedure hence requesting you to provide your feedback on the following queries.

 

  1. How to extract the code for custom visuals (especially Tachometer, Sunburst and HTMLViewer) in order to scan code for internal security team acceptance.
  2. Is there any way to scan the custom visual code to verify vulnerable issues, if yes then can you please suggest the tool that can support to scan the custom visuals.
1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Community Support
Community Support

Hi @venukurs ,

 

1. Modify the .pbix file to a .zip file.

What makes up a Power BI Desktop PBIX File 

v-lionel-msft_0-1597391536924.png

2. Find the JSON files of the custom visuals.

v-lionel-msft_1-1597391920286.png

3. Use code analysis tools to analyze code.

Maybe you can use Visual Studio.

Using the Code Analysis Tool 

 

Best regards,
Lionel Chen

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

 

 

 

 

View solution in original post

3 REPLIES 3
Highlighted
Super User II
Super User II

.pbiviz files are ZIP archives containing JSON files with the visual code.  Unpack and scan.

Highlighted

Thank you for your response.

 

Can you plesae suggest a tool that support to scan json code. 

Highlighted
Community Support
Community Support

Hi @venukurs ,

 

1. Modify the .pbix file to a .zip file.

What makes up a Power BI Desktop PBIX File 

v-lionel-msft_0-1597391536924.png

2. Find the JSON files of the custom visuals.

v-lionel-msft_1-1597391920286.png

3. Use code analysis tools to analyze code.

Maybe you can use Visual Studio.

Using the Code Analysis Tool 

 

Best regards,
Lionel Chen

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

 

 

 

 

View solution in original post

Helpful resources

Announcements
Community Conference

Power Platform Community Conference

Check out the on demand sessions that are available now!

Community Conference

Microsoft Power Platform Communities

Check out the Winners!

secondImage

Create an end-to-end data and analytics solution

Learn how Power BI works with the latest Azure data and analytics innovations at the digital event with Microsoft CEO Satya Nadella.