Skip to content

Generate reports for forges #614

@aj-stein-nist

Description

@aj-stein-nist

OK, this time I think I got the right repo. This is a little but more complicated than "just supporting a new output format" (see below) but it would give an increasing edge to make it perform like (ironically) the very specific static analysis tool it is.

SARIF is a standard worth considering.

Why consider it? For services like GitHub that we use now as I write and you type, we can have link information overlay on Markdown or HTML within the repo. One open source project has some screenshots of how it would look.

Yes, I think it would require tracking lines and offsets, but that also seems more generally useful (if not currently possible, gotta read the Rust code 😅).

Thoughts?

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request
    No fields configured for Feature.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions