securesauce / precli

Precaution CLI - command line static application security testing tool
https://precli.readthedocs.io/
Other
22 stars 3 forks source link

Add security-severity property to sarif rules #323

Closed ericwb closed 7 months ago

ericwb commented 7 months ago

In order for GitHub to render a High, Medium, Low for results it requires the security-severity to be set.

This also means each rule needs a default level specific to it to be set. Before it was defaulting to warning, but now will default to the minimum possible value of level in results.