Summary
The audit recipe surface cannot emit SARIF even though repository search already supports it, which prevents audit recipes from integrating directly with CI code-scanning consumers.
Integrated v1.39.4 findings
- Add SARIF output for audit recipes
Evidence
audit recipes currently support text, JSON, count, compact, and issue-draft output. src/CodeIndex/Cli/QueryCommandRunner.SearchRecipes.cs exposes no SARIF form.
Expected behavior / direction
Add a bounded SARIF output mode for audit recipes, preserving rule/recipe identity, file locations, severity/confidence, truncation metadata, and stable result identifiers.
Environment
Reproduced with a locally built cdidx v1.39.4 from current origin/main at 87b8bf44210344f52ba4cb7827c149dfad32c0c8, using a fresh repository index on macOS arm64.
Summary
The audit recipe surface cannot emit SARIF even though repository search already supports it, which prevents audit recipes from integrating directly with CI code-scanning consumers.
Integrated v1.39.4 findings
Evidence
auditrecipes currently support text, JSON, count, compact, and issue-draft output.src/CodeIndex/Cli/QueryCommandRunner.SearchRecipes.csexposes no SARIF form.Expected behavior / direction
Add a bounded SARIF output mode for audit recipes, preserving rule/recipe identity, file locations, severity/confidence, truncation metadata, and stable result identifiers.
Environment
Reproduced with a locally built
cdidxv1.39.4 from currentorigin/mainat87b8bf44210344f52ba4cb7827c149dfad32c0c8, using a fresh repository index on macOS arm64.