-
Please, see this [Simple Example](https://github.com/microsoft/sarif-tutorials/blob/main/docs/1-Introduction.md#simple-example) in the SARIF tutorials to understand the kind of information current out…
-
### 🔍 Search Terms
sarif
### ✅ Viability Checklist
- [X] This wouldn't be a breaking change in existing TypeScript/JavaScript code
- [X] This wouldn't change the runtime behavior of existing JavaSc…
-
👋 Hello! Not sure if this is the right place to raise this issue, but we've noticed that the way Fortify SCA is generating SARIF documents is causing a bad user experience with GitHub Code Scanning.
…
-
**Expected behaviour**:
No error
**Actual behaviour**:
codeql-action/upload-sarif@v1 doesn't accept empty sarif
Exemple:
```
{
"$schema": "https://schemastore.azurewebsites.net/schemas/js…
-
**Describe the bug**
The below Python code will trigger a warning such as
> tool notification warning: Syntax error Syntax error at line issue-388879.py:7: `rf"{X}\{X}"` was unexpected
**To R…
-
I'm not even sure if `Finding2` should have an `Entity`. I think that it would be great to make `Finding2` serializable some how (json, sarif...). And `Entity` has a refenrece to a `KtElement` and tha…
-
I am trying to use fortify/github-action/ssc-export@v1 task to download Fortify latest scan results and publish the same on to GitHub advanced Security Dashboard.
Error: Action failed with error: E…
-
SARIF upload endpoint returns 2 values:
- `url`
- `id`
Having access to at least `url` would be really handy, as it would allow testing for the result of the analysis in projects that want to o…
-
ref https://github.com/microsoft/sarif-tutorials/tree/main/samples
This allows you to view messages through GitHub security alerts.
-
Hey y'all.
The readme only has this for usage:
```
pip install sarif-om
import sarif_om
```
I'm reading through the microsoft sarif tutorials here:
https://github.com/microsoft/sarif-tuto…