-
Perl::Critic's command line application `perlcritic` produces human readable output, and Perl::Critic has a custom Perl API for integrating with other applications.
Adding a "Static Analysis Result…
-
**Is your feature request related to a problem? Please describe.**
There were no options to export the consolidated report of the project within Microsoft Visual Code. The report will help in so many…
-
This ticket is something between a discussion item and a bug report, let me know if there is a better place for it.
`vexctl` can currently filter out entries from a SARIF file, but it doesn't seem …
-
Since reports and reviews that the add-in isn't working are met with instruction to use it differently, I figured I would demonstrate that it does not appear to work.
Here's my project in VSCode, l…
-
Extracted out from https://github.com/dotnet/roslyn/issues/32102
### Context
We have got lot of internal feature requests where a team wants to enable new analyzer package on their repo, and wants…
-
Using the following version
Sonar scanner 6.1.0.4477
Sonarqube Community Edition, v10.6 (92116)
Sonarqube Community Branch Plugin 1.21.0
Importing SARIF reports when analysing pull request does …
-
### Existing rule
Azure.AppService.WebSecureFtp
### Description of the issue
This happens with multiple rules, but let's take `Azure.AppService.WebSecureFtp` as an example.
We have a `main…
-
Currently, duplicate Results within a single SarifFile are excluded from the SarifFile objects created by sarif.py. Results that are duplicated across SARIF files are not currently checked.
To impl…
-
Running the results in an action workflow still only bring back the current default vulnerabilities. I have a test scan that has 44 vuls in the PR prior to the first merge. The resulting report shows …
-
### 🔍 Search Terms
sarif
### ✅ Viability Checklist
- [X] This wouldn't be a breaking change in existing TypeScript/JavaScript code
- [X] This wouldn't change the runtime behavior of existing JavaSc…