zegl / kube-score

Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in your Kubernetes YAML and Charts. Static code analysis for Kubernetes.
https://kube-score.com
MIT License
2.72k stars 174 forks source link

Replace code for Sarif generation with library #447

Open atombrella opened 2 years ago

atombrella commented 2 years ago

https://github.com/owenrumney/go-sarif contains an implementation of the SARIF standard. Maybe it's worth considering replacing the part of the code with this instead? https://github.com/zegl/kube-score/blob/master/sarif/sarif.go It's not much, though.