Skip to content

chore: Update go-sarif to v3 from v2#1985

Merged
another-rex merged 8 commits intogoogle:mainfrom
another-rex:fix-sarif
Jun 25, 2025
Merged

chore: Update go-sarif to v3 from v2#1985
another-rex merged 8 commits intogoogle:mainfrom
another-rex:fix-sarif

Conversation

@another-rex
Copy link
Copy Markdown
Collaborator

@another-rex another-rex commented Jun 20, 2025

Updated sarif library to v3 from v2. Still outputting SARIF 2.1 as that is what github supports.

I also changed how sarif_test snapshots are generated in the first commit to make it easier to see the diff, so when reviewing, please see the differences between the first commit and the last one for the snapshots, don't look at the full thing.

Currently it seems like there's an issue with ruleIndex being populated with -1 rather that the actual rule index, not sure why yet, I'll post an issue on the libraries repo.

Solved! Updated to v3.2.0 which resolved the above issue.

@another-rex another-rex requested a review from cuixq June 20, 2025 01:36
@codecov-commenter
Copy link
Copy Markdown

codecov-commenter commented Jun 23, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 65.38%. Comparing base (836ab22) to head (fdcba2d).
Report is 12 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #1985      +/-   ##
==========================================
- Coverage   65.93%   65.38%   -0.55%     
==========================================
  Files         168      174       +6     
  Lines       16154    17130     +976     
==========================================
+ Hits        10651    11201     +550     
- Misses       4844     5164     +320     
- Partials      659      765     +106     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@another-rex another-rex merged commit 24e8319 into google:main Jun 25, 2025
17 checks passed
another-rex added a commit to another-rex/osv-scanner that referenced this pull request Jul 11, 2025
another-rex pushed a commit that referenced this pull request Jul 15, 2025
… snap… (#2072)

…shots

Fixes #2071 

I think the code and snapshots were updated as part of #1985, but the
required "text" property in the *description fields was lost and not
detected.

I think this change restores the previous behaviour with respect to
these fields - I can't yet be sure there are no other breaking changes
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants