FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

Add `--sarif-group-rules-by-pack` flag by edoardopirovano · Pull Request #546 · github/codeql-action · GitHub

Add --sarif-group-rules-by-pack flag - #546

Merged
edoardopirovano merged 1 commit into
github:mainfrom
edoardopirovano:add-group-by-pack
Jun 6, 2021
Merged

edoardopirovano merged 1 commit into
github:mainfrom
edoardopirovano:add-group-by-pack

Conversation

Copy link
Copy Markdown
Contributor

This adds the --sarif-group-rules-by-pack to invocations of database analyze which will result in the SARIF produced having rule objects grouped under the QL pack they correspond to rather than appearing at the top level.

Merge / deployment checklist

  • Confirm this change is backwards compatible with existing workflows. This change isn't quite compatible with existing workflows if the users are consuming the SARIF in a way other than uploading it to Code Scanning, as the tool.driver.rules field disappears in favour of <toolComponent>.rules fields. As I understand it we don't support this use case, though.
  • Confirm the readme has been updated if necessary.
  • Confirm the changelog has been updated if necessary.

adityasharad left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

Thanks!

Could you please add a change note? You can link to https://codeql.github.com/docs/codeql-cli/manual/database-analyze/#cmdoption-codeql-database-analyze-no-sarif-group-rules-by-pack or https://github.com/github/codeql-cli-binaries/blob/main/CHANGELOG.md#release-251-2021-04-19, or use the text there as a reference while writing the note. I want to make clear that this will not change most behaviour, but the rule objects will be in different places in the SARIF produced.

This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants


Back | FazBrowse Home | New Git URL