microsoft / sarif-tools

A set of Python command line tools for working with SARIF files produced by code analysis tools
MIT License
76 stars 19 forks source link

Add blame filter upgrade operation #37

Closed balgillo closed 8 months ago

balgillo commented 8 months ago

Add an operation to upgrade old blame filters to new general YAML filters

As part of testing this, I remembered why we had the old "unconvincing line number" condition applied to the filtering. The reason is that some static analysis tools record line number "1" for whole-file issues, but it's wrong to apply blame filtering based on who changed line number 1. I've reinstated this using the new configuration framework, defaulting to true.

Fixes #31