codeql icon indicating copy to clipboard operation
codeql copied to clipboard

How to parse and display SARIF Files?

Open KiRito02 opened this issue 1 year ago • 3 comments

Description of the issue Whenever I execute code scanning and generate a SARIF file, I always read and parse it in standard JSON format, which makes it difficult to display. Are there any tools or methods to visualize the generated SARIF file without using editors like IDEA or VS Code?

Are there any tools or platforms that can visualize the generated SARIF files?

KiRito02 avatar Aug 14 '24 01:08 KiRito02

Thank you for the question! Is there a particular reason why you are excluding VS Code as an option? Unfortunately, I am not aware of a standalone viewer, but I would recommend the SARIF Viewer extension for Visual Studio Code.

ginsbach avatar Aug 15 '24 16:08 ginsbach

There are some viewers mentioned on https://sarifweb.azurewebsites.net/#Viewers , two of them are IDE extensions, but one of them is a react-component for viewing in the browser (you can try it out via https://microsoft.github.io/sarif-web-component/)

There are also some command line tools for processing SARIF, for example

  • https://github.com/microsoft/sarif-tools?tab=readme-ov-file#sarif-tools (can export to CSV which can be viewed in Excel or similar)
  • https://github.com/microsoft/sarif-sdk/blob/main/docs/multitool-usage.md

aibaars avatar Aug 19 '24 12:08 aibaars

@KiRito02 do you have any further questions?

rvermeulen avatar Aug 27 '24 16:08 rvermeulen

This issue is stale because it has been open 14 days with no activity. Comment or remove the Stale label in order to avoid having this issue closed in 7 days.

github-actions[bot] avatar Sep 11 '24 01:09 github-actions[bot]

This issue was closed because it has been inactive for 7 days.

github-actions[bot] avatar Sep 18 '24 01:09 github-actions[bot]