v2.0.0

Breaking Changes

• "Code" and "Description" are now separate columns in the CSV output, whereas before they were
  combined in the "Code" column. They are also separate keys in the "record" format if calling
  sarif-tools from Python.
• --blame-filter argument has been replaced with --filter, using a new YAML-based format for
  more general filtering to replace the previous ad hoc text format which only supported blame.
  • There is a new upgrade-filter command to upgrade your old blame filter files to the new
    format.
  • Thanks to @abyss638 for contributing this enhancement!

Added

• New codeclimate command to generate output for GitLab use.
  • Thanks to @abyss638 for contributing this enhancement!
• New emacs command to generate output for the popular Linux text editor.
  • Thanks to @dkloper for contributing this enhancement!
• #14 Support recursive glob
  • Thanks to @bushelofsilicon for contributing this enhancement!

Changed

• When an input SARIF file contains blame information, the csv command output now has a column
  for Author.
• #18 The diff command now prints up to three locations of new occurrences of issues (all are
  listed in the file output mode).

Fixed

• #4 and #19 docs improvements.
• #12 allow zero locations for record.
• #15 allow text to be absent in message object.
• #20 allow UTF8 with BOM (`utf-8-sig`` encoding)
  • Thanks to @ManuelBerrueta for contributing this fix!

Compatibility

• Python 3.8+

v1.0.0

Changed

• Development, build and release is now based on python-poetry.
• No change to functionality since v0.3.0.

Compatibility

• Python 3.8+

v0.3.0

Added

• Support for globs in Windows, e.g. sarif summary android*.sarif
• info and copy commands

Compatibility

• Python 3.8+

v0.2.0

0.2.0 - 2022-01-07

Added

• --blame-filter argument.

Changed

• Compatible with Python v3.8. Previously, Python v3.9 was required.

Compatibility

• Python 3.8+

v0.1.0

The first release of sarif-tools. We hope this tool will be useful to people working with software scanning and static analysis tools.

sarif-tools was originally developed during the Microsoft Global Hackathon 2021 by Simon Abykov, Nick Brabbs, Anthony Hayward, Sivaji Kondapalli, Matt Parkes and Kathryn Pentland. This first release is a tidied-up version of the final code from the Hackathon project.