3 Commits

Author	SHA1	Message	Date
xgoffin	3f6e4b9e3b	feat(fortifyExecuteScan): added parameter to generated sarif file (#3644) ... * fix(sarif): change format to fit omitempty cases better * feat(fortifyExecuteScan): include category in sarif file * fix(fortifyExecuteScan): access to undefined pointer in some cases Co-authored-by: Sven Merk <33895725+nevskrem@users.noreply.github.com>	2022-03-17 13:09:15 +01:00
xgoffin	dfd2278639	feat(fortifyExecuteScan): full FPR to SARIF implementation (#3604) ... * feat(FPRtoSARIF): boilerplate & comments * Feat(Ingest): Build done, Vulnerabilities partway * feat(Vulnerabilities): now entirely parsed * feat(FprToSarif): integration in Piper step, full xml structure * feat(fpr_to_sarif): base program. Need to replace names in messages * feat(fpr_to_sarif): message substitution and custom definition integration * fix(fpr_to_sarif): missing replacement in tools object * fix(fpr_to_sarif): failing unit test * Fix fortify folder creation for generating sarif * deletion of unzip folder * feat(fpr_to_sarif): better unit test * fix(fpr_to_sarif): pr tests failing * feat(fortifyExecuteScan): complete SARIF file generation * fix(fpr_to_sarif): add extra check and test to prevent panics * rebase onto master, fix ALL conflicts, adapt code and format * fix missing added properties * fix(SARIF): structure * fix(whitesource): wrong sarif structures * Update pkg/fortify/fpr_to_sarif.go * Update pkg/format/sarif.go * Update pkg/format/sarif.go Co-authored-by: Sumeet PATIL <sumeet.patil@sap.com> Co-authored-by: Sven Merk <33895725+nevskrem@users.noreply.github.com>	2022-03-14 11:26:05 +01:00
xgoffin	2cebf370c9	feat(fortifyExecuteScan): added conversion to SARIF for FPR files (#3485) ... * feat(FPRtoSARIF): boilerplate & comments * Feat(Ingest): Build done, Vulnerabilities partway * feat(Vulnerabilities): now entirely parsed * feat(Ingestion): handle Description object * feat(FprToSarif): integration in Piper step, full xml structure * feat(fpr_to_sarif): base program. Need to replace names in messages * feat(fpr_to_sarif): message substitution and custom definition integration * fix(fpr_to_sarif): missing replacement in tools object * fix(fortifyExecuteScan): unit tests * fix(fpr_to_sarif): failing unit test * Fix fortify folder creation for generating sarif * deletion of unzip folder * fix(fortifyExecuteScan): change logging to info * feat(fpr_to_sarif): better unit test * fix(fpr_to_sarif): pr tests failing * feat(fpr_to_sarif): add specific properties to sarif * feat(fpr_to_sarif): severity integration * fix(fpr_to_sarif): unit test fixed Co-authored-by: Sven Merk <33895725+nevskrem@users.noreply.github.com> Co-authored-by: Sumeet PATIL <sumeet.patil@sap.com>	2022-02-08 14:10:40 +01:00