snyk-partners / fortify-snyk-parser

4 stars 5 forks source link

fix: use scan.targetFileName as part of issue id #2

Closed mikomraz closed 3 years ago

mikomraz commented 3 years ago

As per Fortify SSC specification, each issue should have a unique id across the whole scan. Because for multi-module projects, the exact same issue can appear under multiple modules - there might be a collision. The solution was to use the filed displayTargetFile from the scan object, and prepend it to the existing unique issue id (hash of the issue json).

Also added a Target File field to the custom issue display, for convenience.