mercedes-benz / sechub

SecHub provides a central API to test software with different security tools.
https://mercedes-benz.github.io/sechub/
MIT License
259 stars 58 forks source link

SecHub Report in SARIF Format #369

Open Jeeppler opened 3 years ago

Jeeppler commented 3 years ago

Offer the ability for users to download a code scan in the Static Analysis Results Interchange Format (SARIF). This would allow users to use existing tools, such as the Sarif Viewer for Visual Studio Code, to view the report: https://marketplace.visualstudio.com/items?itemName=MS-SarifVSCode.sarif-viewer


Jeremias Eppler jeremias.eppler@daimler.com, Daimler TSS GmbH, imprint

Jeeppler commented 3 years ago

In addition, it would be possible to integrate SecHub into the GitHub Actions Pipeline: https://github.blog/2020-10-05-announcing-third-party-code-scanning-tools-static-analysis-and-developer-security-training/