search

microsoft / sarif-js-sdk

JavaScript code and supporting files for working with the 'Static Analysis Results Interchange Format' (SARIF, see https://github.com/oasis-tcs/sarif-spec)
MIT License
26 stars 13 forks source link

Meanwhile official SDK is released, you may use node-sarif-builder #31

Open nvuillam opened 2 years ago

nvuillam commented 2 years ago

I implemented a small library to help build valid SARIF logs with simple methods

I think it covers most of the cases of SAST tools

If you want to add a link until official one is released, please be my guest :)

https://github.com/nvuillam/node-sarif-builder

scalvert commented 2 years ago

Oh awesome. Let me take a look.

nvuillam commented 2 years ago

@scalvert thanks :)

FYI, the library is already used within:

scalvert commented 1 year ago

@nvuillam I'm finally circling back to this (I know, it's been a while!!).

I took a look at your implementation; it looks great! Would you be interested in discussing a potential convergence of your package and this repo?

nvuillam commented 1 year ago

Hi @scalvert thanks for the feedback :)

Yes we can discuss that of course :)

scalvert commented 1 year ago

I have an implementation of a SARIF builder in another repo too, though it's incomplete, and the plan was to extract it from there and house it here. We got busy with other work, but now seems like the right time to circle back on this.

What's the best way to collaborate/chat about this?

nvuillam commented 1 year ago

I do open-source for sharing and i'm sure my library would have more visibility here so we could do something like the following:

Is it what you have in mind ? :)

Even if you think about something different, you can contact me on LinkedIn to discuss more about it ^^