Ericsson / codechecker

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy

https://codechecker.readthedocs.io

Apache License 2.0

2.16k stars 360 forks source link

Support exporting Static Analysis Results Interchange Format (SARIF) #4036

Open LebedevRI opened 9 months ago

LebedevRI commented 9 months ago

1797 (via #4011, thanks to @csordasmarton / @Szelethus),

has added support for ingesting SARIF into codechecker, however i was under false pretense that #1797 was about the exact opposite feature: now that GitHub can ingest SARIF, it would be nice to be able to export SARIF from codechecker. While, i'm sure, the codechecker-produced HTML reports are better than what GitHub will produce, the (initial) UX of having to download the HTML is obviously worse than native GitHub integration.

jiridanek commented 9 months ago

According to a comment

https://github.com/Ericsson/codechecker/issues/1797#issuecomment-1757039942

You can convert existing report to sarif using report-converter:
report-converter -t cppcheck out/double-free_5197372318879967385.plist -e sarif -o cppcheck.sarif

Looks like some integration with GitHub PR review webui for codechecker running in a github action might be already possible.