lacework / lw-scanner-action

Github Action for running the Lacework Inline Scanner as part of actions workflows
Apache License 2.0
17 stars 13 forks source link

feat: Output scan results in SARIF #73

Open JPLachance opened 2 months ago

JPLachance commented 2 months ago

Feature Request

Describe the Feature Request

Multiple container images scanners support generating a SARIF file for results ingestion in other security solutions, like GitHub.

The request: make lacework/lw-scanner-action generate a SARIF file that we will be able to upload to GitHub Advanced Security.

Is your feature request related to a problem? Please describe

The current problem is that we cannot integrate lacework/lw-scanner-action into a workflow that engineers are used to work with. Engineers are used to access the Security tab of their GitHub repository to review findings.

Describe Preferred Solution

Make lacework/lw-scanner-action generate a SARIF file that we will be able to upload to GitHub Advanced Security.

Additional Context

Multiple Lacework competitors have this feature.