Преглед изворни кода

🐛 fix(sarif): update report to pass validator (#1167)

* 🐛 fix(sarif): update report to pass validator

* ✅ test(sarif): update sarif report testdata
Dariusz Porowski пре 2 година
родитељ
комит
146f69e51b
3 измењених фајлова са 6 додато и 3 уклоњено
  1. 3 1
      report/sarif.go
  2. 1 1
      testdata/baseline/baseline.sarif
  3. 2 1
      testdata/expected/report/sarif_simple.sarif

+ 3 - 1
report/sarif.go

@@ -10,7 +10,7 @@ import (
 
 func writeSarif(cfg config.Config, findings []Finding, w io.WriteCloser) error {
 	sarif := Sarif{
-		Schema:  "https://schemastore.azurewebsites.net/schemas/json/sarif-2.1.0-rtm.5.json",
+		Schema:  "https://json.schemastore.org/sarif-2.1.0.json",
 		Version: "2.1.0",
 		Runs:    getRuns(cfg, findings),
 	}
@@ -34,6 +34,7 @@ func getTool(cfg config.Config) Tool {
 		Driver: Driver{
 			Name:            driver,
 			SemanticVersion: version,
+			InformationUri:  "https://github.com/gitleaks/gitleaks",
 			Rules:           getRules(cfg),
 		},
 	}
@@ -164,6 +165,7 @@ type Rules struct {
 type Driver struct {
 	Name            string  `json:"name"`
 	SemanticVersion string  `json:"semanticVersion"`
+	InformationUri  string  `json:"informationUri"`
 	Rules           []Rules `json:"rules"`
 }
 

+ 1 - 1
testdata/baseline/baseline.sarif

@@ -1,5 +1,5 @@
 {
- "$schema": "https://schemastore.azurewebsites.net/schemas/json/sarif-2.1.0-rtm.5.json",
+ "$schema": "https://json.schemastore.org/sarif-2.1.0.json",
  "version": "2.1.0",
  "runs": [
  ]

+ 2 - 1
testdata/expected/report/sarif_simple.sarif

@@ -1,5 +1,5 @@
 {
- "$schema": "https://schemastore.azurewebsites.net/schemas/json/sarif-2.1.0-rtm.5.json",
+ "$schema": "https://json.schemastore.org/sarif-2.1.0.json",
  "version": "2.1.0",
  "runs": [
   {
@@ -7,6 +7,7 @@
     "driver": {
      "name": "gitleaks",
      "semanticVersion": "v8.0.0",
+     "informationUri": "https://github.com/gitleaks/gitleaks",
      "rules": [
       {
        "id": "aws-access-key",