How to parse and display SARIF Files?

github / codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

https://codeql.github.com

MIT License

7.51k stars 1.49k forks source link

How to parse and display SARIF Files? #17217

Open KiRito02 opened 1 month ago

KiRito02 commented 1 month ago

Description of the issue Whenever I execute code scanning and generate a SARIF file, I always read and parse it in standard JSON format, which makes it difficult to display. Are there any tools or methods to visualize the generated SARIF file without using editors like IDEA or VS Code?

Are there any tools or platforms that can visualize the generated SARIF files?

ginsbach commented 4 weeks ago

Thank you for the question! Is there a particular reason why you are excluding VS Code as an option? Unfortunately, I am not aware of a standalone viewer, but I would recommend the SARIF Viewer extension for Visual Studio Code.

aibaars commented 3 weeks ago

There are some viewers mentioned on https://sarifweb.azurewebsites.net/#Viewers , two of them are IDE extensions, but one of them is a react-component for viewing in the browser (you can try it out via https://microsoft.github.io/sarif-web-component/)

There are also some command line tools for processing SARIF, for example

https://github.com/microsoft/sarif-tools?tab=readme-ov-file#sarif-tools (can export to CSV which can be viewed in Excel or similar)
https://github.com/microsoft/sarif-sdk/blob/main/docs/multitool-usage.md

rvermeulen commented 2 weeks ago

@KiRito02 do you have any further questions?

github-actions[bot] commented 2 days ago

This issue is stale because it has been open 14 days with no activity. Comment or remove the Stale label in order to avoid having this issue closed in 7 days.