GitGuardian / ggshield

Find and fix 400+ types of hardcoded secrets and 70+ types of infrastructure-as-code misconfigurations.
https://gitguardian.com
MIT License
1.59k stars 139 forks source link

Sarif Output Format Support #869

Closed Jiri-Stary closed 4 weeks ago

Jiri-Stary commented 3 months ago

Is your feature request related to a problem? Please describe.

I would like to get the output of ggshield in SARIF format, so it can be process afterwards. My goal is to unify scanning experience with multiple scanning tools, so i can show aggregated vulnerability information (number of issues and their severity) on github workflow runs and / or on PRs.

A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]

Current json output is undocumented and does note define a schema

Describe the solution you'd like

Provide option to define additional output format as SARIF instead of json.

agateau-gg commented 3 months ago

Hi Jiri,

Adding SARIF support is on our roadmap, work on it should start soon.

We are also working on writing down schemas for ggshield JSON outputs. Some commands already have their schemas, you can find them here: https://github.com/GitGuardian/ggshield/tree/main/doc/schemas