Version updated for https://github.com/sarif-kit/sarif-kit to version v0.3.0. This action is used across all versions by ? repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. Action Summary The sarif-kit GitHub Action converts output from various static analysis tools into valid SARIF 2.1.0 format suitable for GitHub Code Scanning, which requires this specific format for input. It supports linting tools like yamllint and pip-audit, translating their native output into SARIF reports that GitHub can understand, ensuring consistent error reporting across different scanning engines.

Version updated for https://github.com/sarif-kit/sarif-kit to version v0.1.1. This action is used across all versions by ? repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action converts the native output of popular security scanners into valid SARIF 2.1.0 format, which can then be uploaded to GitHub Code Scanning for automated analysis. It automates the conversion process, addressing issues where tools like pip-audit, codespell, and yamllint do not natively emit SARIF. The action is available in both GitHub Actions workflows and on your machine, supporting various tools such as pip-audit, yamllint, and codespell.

Version updated for https://github.com/sarif-kit/sarif-kit to version v0.1.0. This action is used across all versions by ? repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. Action Summary The sarif-kit action converts the native output of various scanners and linters into valid SARIF 2.1.0, making them compatible with GitHub Code Scanning. It automates the process of converting tool outputs to SARIF format, which is required for integrating security scans into CI/CD pipelines. The action supports tools like pip-audit, yamllint, and codespell, automatically detecting the correct adapter and providing options for customizing the input and output paths, including rewriting absolute paths as relative ones and handling multiple findings in a single SARIF file.