microsoft / sarif-azuredevops-extension

MIT License
9 stars 4 forks source link

Add revisionId to versionControlProvenance in case versionControlProvenance not existing #37

Closed tbreckle closed 4 months ago

tbreckle commented 4 months ago

Added revisionId in case no versionControlProvenance is existing in the SARIF file. With the revisionId available the generated links to the repository include the version in the query. Without the revisionId the link just points to the repo and one ends up on the revision (branch, tag, commit) that was selected last. With the revisionId set you end up on the commit that was used by the respective build.

50Wliu commented 4 months ago

Makes sense to me, thanks for contributing!