-
Notifications
You must be signed in to change notification settings - Fork 543
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: added option --sarif-file-output for snyk code test [NEBULA-157] #2640
feat: added option --sarif-file-output for snyk code test [NEBULA-157] #2640
Conversation
|
code: true, | ||
_: [], | ||
_doubleDashArgs: [], | ||
'sarif-file-output': 'test', |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
[nitpicking] since sarif is a JSON-based format, i would name the file to reflect that it is indeed a json file
'sarif-file-output': 'test', | |
'sarif-file-output': 'test.json', |
ca345db
to
06a8a8c
Compare
What this does
This PR adds support to the
--sarif-file-output
flag insnyk code test
.The commands
snyk test
andsnyk iac test
support this flag, whilesnyk code test
only supports--sarif
but not writing to a file directly.Notes for the reviewer
Run
snyk code test --sarif-file-output
in a repository to generate a file with the sarif result. This can be used simultaneously with other flags like--sarif
and--no-markdown
.More information