search

nimble-code / Cobra

An interactive (fast) static source code analyzer
139 stars 31 forks source link

Support the SARIF output format for Cobra output #20

Closed mjeronimo closed 2 years ago

mjeronimo commented 3 years ago

In order to integrate with tools that support a software development process envisioned for Space ROS, Cobra should support the SARIF output format for detected issues:

Jenkins integration is a higher priority (JUnit XML format output), but SARIF is also desirable. It would also be helpful to be able to output both file types for a single scan (so that the tool doesn't have to be run again just to produce a different output format).

nimble-code commented 3 years ago

will look into it

nimble-code commented 2 years ago

For now, the work is aimed at allowing Cobra to both write and read JSON formatted warnings, and develop selected converters into and out from other formats like SARIF, JUnit, etc. (e.g., the JPL Scrub format is another often requested format). We can of course revisit this issue once some experience with JSON converters is obtained, and proves insufficient for any reason.