Skip to content

Updates to enable SAST remediation support#319

Merged
drdavella merged 2 commits intomainfrom
sarif-support
Mar 1, 2024
Merged

Updates to enable SAST remediation support#319
drdavella merged 2 commits intomainfrom
sarif-support

Conversation

@drdavella
Copy link
Copy Markdown
Member

@drdavella drdavella commented Feb 29, 2024

Overview

Updates to support new SAST remediation codemods

Description

  • These changes were necessary in order to support some new SAST remediation codemods
  • It introduces a plugin infrastructure for detecting the tool provider encoded in SARIF files
  • Previously SARIF files were not being handled at all but this change makes them available via the CodemodExecutionContext
  • Fixed the location filtering logic which was previously ignoring all but the first location
  • Made the CodemodExecutionContext available to the ResultSet API so that detectors can make use of additional contextual information (e.g. base directory path) where necessary

@sonarqubecloud
Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
3 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

@drdavella drdavella marked this pull request as ready for review February 29, 2024 21:22
@drdavella drdavella added this pull request to the merge queue Mar 1, 2024
@github-merge-queue github-merge-queue bot removed this pull request from the merge queue due to no response for status checks Mar 1, 2024
@drdavella drdavella added this pull request to the merge queue Mar 1, 2024
Merged via the queue into main with commit 8a7946e Mar 1, 2024
@drdavella drdavella deleted the sarif-support branch March 1, 2024 16:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants