search

ocurity / dracon

Security scanning & static analysis tool - forked and rewritten from @thought-machine/dracon
https://smithy.security
Apache License 2.0
73 stars 12 forks source link

Semgrep and Bandit Producers don't Propagate CWE #205

Closed flowirtz closed 2 months ago

flowirtz commented 3 months ago

Both the producers/bandit and producers/semgrep do not propagate the CWE into the Issue object, even though their JSON representations contain that information. We should parse and propagate this information into the Issue correctly.