Support Additional Output Formats (ie. JUNIT, SARIF)

[AErmie]

Is your feature request related to a problem? Please describe.
When using MegaLinter in CI, the output needs to be developer-friendly and easy to reference. Especially if there are a lot of errors that need to be addressed.

Describe the solution you'd like
I would like native support for different output formats, including JUNIT, SARIF, and possibly HTML/PDF.

Describe alternatives you've considered
There are a few issues (Report in JSON and Support for JUNIT artifacts for results visualization) that provide alternative approaches like converting TAP files, but that is not always an option (ie. in self-hosted/shared environments that have limitations and restrictions on what can be installed on the build server).

Additional context
Here are a few tools that provide additional output formats (in case their approach can be easily retrofitted into MegaLinter):

• Checkov
• TFSec
• KICS
• Trivy
• Terrascan

[github-actions]

This issue has been automatically marked as stale because it has not had recent activity.
It will be closed in 14 days if no further activity occurs.
Thank you for your contributions.

If you think this issue should stay open, please remove the O: stale 🤖 label or comment on the issue.

[nvuillam]

Not stale :)
It will require a lot of work, probably be in v6, but should happen someday (probably with SARIF format) and bring MegaLinter to the next level ;)

[wesley-dean-flexion]

+1 to SARIF support

[nvuillam]

@wesley-dean-flexion SPOILER : With v6 (currently in alpha), there will be lots of new linters, often security oriented, and SARIF support managed for the linters that are able to produce it (see icons ) , and a single MegaLinter SARIF result that will be the aggregation of all linter SARIF outputs :)

https://megalinter.github.io/v6-alpha/supported-linters/

[dgutson]

@nvuillam when is v6 expected to go out?

[nvuillam]

@dgutson I have to synchronize with a partner, but for the moment it is planned for mid/end of june :)

You are free to use v6 alpha at your own risk, but it's really an alpha version :D