search

koalaman / shellcheck

ShellCheck, a static analysis tool for shell scripts
https://www.shellcheck.net
GNU General Public License v3.0
36.53k stars 1.78k forks source link

Provide SARIF Output ? #2405

Open nvuillam opened 2 years ago

nvuillam commented 2 years ago

Hi, is it in the roadmap to make shellcheck provide SARIF output ? (SARIF is the OASIS common format for all analysis tools )

It would help improve its integration within MegaLinter :)

Best regards

koalaman commented 2 years ago

This format appears to be very specific to GitHub and highly over-engineered, so it's not currently in a state where I'd want to support it upstream. This issue can be left open in case that changes though.

nvuillam commented 2 years ago

Thanks for your response It seems it really is becoming the standard output for all type of linters, not just for GitHub stuff ^^

Thanks for letting it open in case someone would like to make a PR :)

nishwalshetty commented 2 years ago

@koalaman i am also looking forward for SARIF support from shellcheck

jamacku commented 2 years ago

I would love to see native SARIF support in ShellCheck, but I also know how complex the format specification is.

Maybe something to note is that there are at least two GitHub actions that can output ShellCheck findings in SARIF format:

dgutson commented 2 years ago

SARIF is by large becoming a standard with a reach far beyond github. It is being used by lint aggregators and dashboards (eg we are adding SARIF support to CodeChecker).

schewara commented 1 month ago

This would still great to have, as in the last 2 years adoption of the SARIF format has not slowed down and having to deal with only one universal file format instead of hundred different tool specific output/report formats makes automated testing and reporting so much easier.