Skip to content

support JSON-based Static Analysis Results Interchange Format (SARIF) output format #1455

@pabs3

Description

@pabs3

It would be nice if codespell were to support the Static Analysis Results Interchange Format (SARIF) standard. This has replaced the Fedora Firehose format and is a JSON based cross-tool format. The SDK is .NET based but there is a project with Python classes for the object model, TBH the JSON could just be generated directly without going through the object model though. Looking at the example SARIF files in the standard, it looks fairly easy to generate directly.

https://docs.oasis-open.org/sarif/sarif/v2.0/csprd01/sarif-v2.0-csprd01.html
https://github.com/fedora-static-analysis/firehose
https://blogs.grammatech.com/static-analysis-results-a-format-and-a-protocol-sarif-sasp
https://github.com/microsoft/sarif-sdk/
https://github.com/microsoft/sarif-python-om

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions