Sarif Output Format Support

[Jiri-Stary]

Is your feature request related to a problem? Please describe.

I would like to get the output of ggshield in SARIF format, so it can be process afterwards. My goal is to unify scanning experience with multiple scanning tools, so i can show aggregated vulnerability information (number of issues and their severity) on github workflow runs and / or on PRs.

A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]

Current json output is undocumented and does note define a schema

Describe the solution you'd like

Provide option to define additional output format as SARIF instead of json.

[agateau-gg]

Hi Jiri,

Adding SARIF support is on our roadmap, work on it should start soon.

We are also working on writing down schemas for ggshield JSON outputs. Some commands already have their schemas, you can find them here: https://github.com/GitGuardian/ggshield/tree/main/doc/schemas

[mathieubellon]

Hi @Jiri-Stary FYI GGShield 1.30 is now supporting SARIF format