Skip to content

Conversation

@airadier
Copy link
Collaborator

  • Fix duplicate ruleID in SARIF when grouping by package
  • Don't add rules and results in SARIF, when grouping by package, if the package does not have vulnerabilities
  • Use package name, version and path as the rule id
  • Clean SARIF messages after result URL has been removed
  • Update test fixture for V1 scan result
  • Update fixture for SARIF report
  • Bump CLI scanner to 1.24.1
  • Improve download test to support multi os/arch

- Fix duplicate ruleID in SARIF when grouping by package
- Don't add rules and results in SARIF, when grouping by package, if the package does not have vulnerabilities
- Use package name, version and path as the rule id
- Clean SARIF messages after result URL has been removed
- Update test fixture for V1 scan result
- Update fixture for SARIF report
- Bump CLI scanner to 1.24.1
- Improve download test to support multi os/arch
@airadier airadier requested a review from a team as a code owner November 26, 2025 16:14
@airadier airadier merged commit 0225eb0 into master Nov 26, 2025
10 checks passed
@airadier airadier deleted the fix-sarif-duplicate-ids branch November 26, 2025 16:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants