(sorry for the many issues/ideas, love the tool!)
It would be nice if we could export some filtered/boiled-down list of extracted APIs.
The idea is to put the file in git to detect changes in APIs detected over time, flag new attack surfaces.
The Semgrep JSON file is not quite great for that, since it will have variance from simple stuff (line numbers, col, offset of findings, even the lines)
(sorry for the many issues/ideas, love the tool!) It would be nice if we could export some filtered/boiled-down list of extracted APIs. The idea is to put the file in git to detect changes in APIs detected over time, flag new attack surfaces. The Semgrep JSON file is not quite great for that, since it will have variance from simple stuff (line numbers, col, offset of findings, even the lines)
Something like that:
That way, the file would only change for added/removed paths, or slight changes