Skip to content

v0.4.1 Phase 3 Connect (SARIF)

Choose a tag to compare

View all tags
@chriswayneh chriswayneh released this 24 Sep 12:00
· 8 commits to main since this release
v0.4.1
3c0b3a5

Phase 3 Connect (continued) - v0.4.1

What shipped

  • detdrift diff --format sarif emits SARIF 2.1.0 for IMPACTED rules (and sample warnings)
  • --json still works (alias for --format json); default remains human
  • Example CI snippet: docs/ci/sarif-example.yml (upload with github/codeql-action/upload-sarif)
  • 47 tests

Already in v0.4.0

  • Empty / incomplete after-sample warnings

Still to come in Phase 3

  • At least one simple importer (or documented stub)

Offline; not a SIEM or matcher.

Assets 2
Loading