5 Commits

Author	SHA1	Message	Date
thtri	ef3e720464	Classify Fortify & Checkmarx findings into audit group / Common properties (#3904) ... * fix(fortify): suppressed issues got "Unknown" category and state * fix (fortify-sarif): classify findings into audit group * fix(fortify-checkmarx-sarif): common properties bag for Fortify and Checkmarx (accepting the risk of empty value) * fix (checkmarx-sarif): classify findings into audit group * fix (sarif): formatting	2022-07-21 11:15:55 +02:00
xgoffin	5edb0d2566	feat(fortifyExecuteScan): implement a system to limit the number of API calls upon request failures (#3818) ... * feat(fortifyExecuteScan): add a max number of retries for API calls in SARIF conversion * feat(checkmarxExecuteScan): implement max number of retries on API call for descriptions in SARIF processing * feat(checkmarx/fortify): extra logging line when failing an API request in SARIF conversion * fix(fortifyExecuteScan): panic if undefined projectversion in sarif * fix(fortifyExecuteScan): logging improvement * fix(fortifyExecuteScan): wrong if condition caused crash * fix(fortifyExecuteScan): do not log if retries hit -1, adjust logging * fix(SARIF): commenting API calls for Checkmarx until a solution can be found for the API issues * feat(SARIF): add omitempty to extensions	2022-06-09 10:32:08 +02:00
xgoffin	903f273012	feat(checkmarxExecuteScan): added API to get description, incorporated to SARIF file (#3814)	2022-06-01 15:48:56 +02:00
xgoffin	1fde2ce677	feat(checkmarxExecuteScan): improvements to SARIF file generation (#3781) ... * feat(checkmarxExecuteScan): respect SARIF standard more closely * fix(checkmarxExecuteScan): edge case where message would be empty in SARIF * fix(checkmarxExecuteScan): better message handling to ensure field is populated * feat(checkmarxExecuteScan): SARIF file readability * feat(checkmarxExecuteScan): include the helpURL as part of the Help object * fix(sarif): remove wrong structure addition * feat(checkmarxExecuteScan): safer handling of version in SARIF file * feat(checkmarxExecuteScan): add CWE number to tags	2022-05-19 14:57:13 +02:00
xgoffin	3c55d3c99c	feat(checkmarxExecuteScan): convert Checkmarx xml report to SARIF (#3696) ... * feat(checkmarxExecuteScan): sarif conversion for Checkmarx XML reports * feat(checkmarxExecuteScan): added taxonomies and similarityID * fix(checkmarxExecuteScan): proper handling of ruleId and ruleIndex * fix(sarif): mistype in checkmarx properties * fix(checkmarxExecuteScan): fixed occasional panics when handling audit comment * chore(sarif): proper variable naming * chore(code): fix missing and unrecognized comments * trigger PR * fix(format): extra space Co-authored-by: Sven Merk <33895725+nevskrem@users.noreply.github.com>	2022-04-04 16:12:35 +02:00