output to json about flawfinder HOT 6 CLOSED

The current thinking is that we'll generate SARIF, an OASIS standard, as described in #33. SARIF uses JSON. So we'd kill two birds with one stone.

Some other folks are working on generating SARIF, but there were some prep steps first. I'm hoping that they do all the hard lifting & then I just merge it :-).

from flawfinder.

I've just looked for this too.

If the author is interested, I'm happy to make a PR supporting this feature.

from flawfinder.

The SARIF support has been merged. Once this new version has been released, you'll get your JSON!!

from flawfinder.

Version 2.0.16 has been released with SARIF support, use --sarif to generate it. That's a specific JSON format.

So I'm closing this.

from flawfinder.

Fantastic!

Keep up the great work making this valuable tool better and more adaptable for SAST inclusion.

from flawfinder.

Gladly! I'll note that I also made a few improvements to the documentation to help people integrate the tool into their CI pipeline (if that's what they want to do).

Pull requests welcome :-).

from flawfinder.