search

crystal-ameba / ameba

A static code analysis tool for Crystal
https://crystal-ameba.github.io
MIT License
516 stars 35 forks source link

Support SARIF output #236

Open kimburgess opened 3 years ago

kimburgess commented 3 years ago

SARIF provides a standard output format for static analysis tools, like ameba.

With the continued integration of security tools into GitHub, there may be a lot of auxiliary functionality that can be gained by providing an associated formatter. This article has some nice examples of this.

This become particularly useful when combined with crystal-ameba/ameba-security#1.

Happy to help out with work on this if it's of interest.

veelenga commented 3 years ago

@kimburgess looking great. This can be implemented using a separate formatter. Here is a list of available formatters:

https://github.com/crystal-ameba/ameba/tree/master/src/ameba/formatter

If you feel happy to help, please take a look.