Skip to content

Improve tool names in sarif output #23

@Daverlo

Description

@Daverlo

@davidknise You seem to be the main maintainer of this repo.

Bandit and Gosec are using the name property for outputting a description (Security audit for python by bandit and Golang security checks by gosec).

At Github Code Scanning, we use those names for displaying the tool at the Security page. We added some internal logic for handling these special cases and rename them to the tool name, but we are in the process of cleaning up the code and removing it. We suggest using the name property for outputing the tool name (Bandit, and Gosec), and the fullName or short/longDescription properties for storing the current long name.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions