thoughtworks / talisman

Using a pre-commit hook, Talisman validates the outgoing changeset for things that look suspicious — such as tokens, passwords, and private keys.
https://thoughtworks.github.io/talisman/
MIT License
1.89k stars 241 forks source link

Support SARIF file output format #384

Open damiencarol opened 2 years ago

damiencarol commented 2 years ago

Is your feature request related to a problem? Please describe. I want to import data of Talisman into my vulnerability aggregation tool OWASP DefectDojo. Talisman doesn't seems to generate reports in a format accepted by DefectDojo.

Describe the solution you'd like Having an option to generate the report in SARIF format.

Describe alternatives you've considered Check the documentation if another format is possible (no HTML)

Additional context Many security related tools support importing data from SARIF report.

damiencarol commented 2 years ago

FYI @mydailypuff