Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Provide SARIF Output report ? #2083

Open
nvuillam opened this issue Dec 8, 2021 · 7 comments
Open

Provide SARIF Output report ? #2083

nvuillam opened this issue Dec 8, 2021 · 7 comments

Comments

@nvuillam
Copy link
Contributor

nvuillam commented Dec 8, 2021

Hi, is it in the roadmap to make cspell provide SARIF output ? (SARIF is the OASIS common format for all analysis tools )

It would help improve its integration within MegaLinter :)

Best regards

@nschonni
Copy link
Collaborator

nschonni commented Dec 8, 2021

It looks pretty C# specific still https://sarifweb.azurewebsites.net/#ToolsLibraries

@nvuillam
Copy link
Contributor Author

nvuillam commented Dec 8, 2021

Microsoft is at the origin of the format, but it is now maintained by OASIS, and widely adopter by all kinds of analyzers, as you can see in the following table :) (orange badges)

https://megalinter.github.io/v6-alpha/supported-linters/

@Jason3S
Copy link
Collaborator

Jason3S commented Dec 9, 2021

@nvuillam,

The spell checker supports custom reporters. See cspell/packages/cspell-json-reporter · streetsidesoftware/cspell for an example.

Depending upon the SARIF format, it should not be too hard to make one. I'm open for a Pull Request to add it.

@nvuillam
Copy link
Contributor Author

I'm currently directly working a lot of MegaLinter, but why not someday :)

If it's ok let's keep this issue open so maybe someone will want to take it ^^

@nvuillam
Copy link
Contributor Author

There is now node-sarif-builder available to easily build SARIF reports, if you (or a contributor) are interested :)

@Jason3S
Copy link
Collaborator

Jason3S commented Jan 11, 2022

There is now node-sarif-builder available to easily build SARIF reports, if you (or a contributor) are interested :)

Cool.

@nschonni
Copy link
Collaborator

nschonni commented Jun 5, 2022

FYI @shaopeng-gh since you seem to be opening similar issues on other repos lately, but with an offer of actually supplying code

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants