Consider SARIF support for tool output -> MSBuild logs

dotnet / msbuild

The Microsoft Build Engine (MSBuild) is the build platform for .NET and Visual Studio.

https://docs.microsoft.com/visualstudio/msbuild/msbuild

MIT License

5.17k stars 1.34k forks source link

Consider SARIF support for tool output -> MSBuild logs #8028

Open rainersigwald opened 1 year ago

rainersigwald commented 1 year ago

The Microsoft C++ team is considering adding SARIF support to the MSVC toolchain. That allows capturing much more information about errors/warnings than we currently support, through the canonical error format.

MSBuild should consider extending the tool-output-scraping support to include SARIF output, and map the SARIF format to our error/warning structured events.

This might also help with issues like #8019 that primarily arise because an error cannot today have supplemental information.

rainersigwald commented 1 year ago

One thing that might be important: today's output scanners are line-at-a-time, so this might require tool output SARIF to be in JSON lines.

rainersigwald commented 1 year ago

@yuehuang010 is working on this.