You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Adding support for fingerprints in SARIF (Static Analysis Results Interchange Format) allows for the de-duplication of results across multiple scans or runs. This would be very helpful to track all the findings without the additional noise of duplicate findings.
Examples
For any type of findings, I want to be able to run checkov -d . -o sarif and see fingerprints or partialFingerprints. This way I can compare previous SARIF outputs to see if specific findings were already reported
Describe the feature
Adding support for fingerprints in SARIF (Static Analysis Results Interchange Format) allows for the de-duplication of results across multiple scans or runs. This would be very helpful to track all the findings without the additional noise of duplicate findings.
Examples
For any type of findings, I want to be able to run
checkov -d . -o sarif
and seefingerprints
orpartialFingerprints
. This way I can compare previous SARIF outputs to see if specific findings were already reportedAdditional context
OASIS documentation for fingerprints
The text was updated successfully, but these errors were encountered: