Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Converting CVE log file to Sarif log file:formatting applied accordin… #74

Open
wants to merge 2 commits into
base: dunfell
Choose a base branch
from

Conversation

KArashid
Copy link

Get packages CVEs files and convert them to Sarif format.

  1. Used results and misused rules tags of Sarif format
  2. output is compatible with Trivy Sarif format
  3. Output is validated with online validator: https://sarifweb.azurewebsites.net/Validation
  4. Output is in a format accepted by Github Advance Security

@kraj
Copy link
Contributor

kraj commented Jul 13, 2022

you might post it to openembedded-core@lists.openembedded.org mailing list as well for review.

@KArashid KArashid force-pushed the extend-cveOutput-to-sarif-format branch from 510b3bf to 5110504 Compare July 13, 2022 19:19
halstead pushed a commit that referenced this pull request Apr 13, 2023
Changelog:
==========
Bug fixes:
----------
    Issue #74: Include directory should override exclude file.

Improvements:
-------------
    Pull #75: Fix partially unknown PathLike type.
    Convert os.PathLike to a string properly using os.fspath.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
4 participants