Output Results in SARIF Format
See original GitHub issueIs your feature request related to a problem? Please describe.
It would be great, given Github and potential Gitlab integration amongst other tools, it would be great if, aside checkov
’s JSON support, it outputted SARIF.
Describe the solution you’d like An additional output parameter supporting SARIF.
Describe alternatives you’ve considered
The alternative is continuing to use the JSON output of checkov
and other tools. This is acceptable, but in the long-term standard output formats improve the chances of adoption, especially if Github and other source code repositories are accepting this format. As checkov
supports static analysis of many different IaC formats, this would alleviate a lot of repeat busywork on data-mapping utilities, probably not just among my colleagues. 😃
Additional context My colleagues increasingly integrate with a variety of tools supporting SARIF import, not just Gitlab, and many other tools in this space are adopting this format for re-usability of exported findings. I feel this would further justify the value of your already amazing tool and reduce friction, thanks!
Issue Analytics
- State:
- Created 3 years ago
- Reactions:4
- Comments:6 (1 by maintainers)
Top GitHub Comments
done thanks to @ne0z 😃
+1
for this feature.