aquasecurity / trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
https://aquasecurity.github.io/trivy
Apache License 2.0
22.23k stars 2.2k forks source link

Including invocation startTime and endTime in SARIF output #3226

Open fniessink opened 1 year ago

fniessink commented 1 year ago

Is it possible to make Trivy write the invocation startTimeUtc and endTimeUtc properties to the SARIF output report?

I haven't been able to find anything about manipulating the contents of the SARIF output unfortunately.

Rationale: we want to monitor that SARIF reports are current.

CC: @Sebastiaan127001

github-actions[bot] commented 1 year ago

This issue is stale because it has been labeled with inactivity.

Sebastiaan127001 commented 1 year ago

Who can help us with this?

github-actions[bot] commented 1 year ago

This issue is stale because it has been labeled with inactivity.