advanced-security/codeql-sarif-security-standard-annotator
Compare a CodeQL SARIF results file to a security standard CWE list and annotate the SARIF rules with a tag to highlight results applicable to the security standard
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| sarifFile | The CodeQL SARIF result file | yes | — |
| cweFile | The CWE list XML file, defaults to OWASP Top 10 2021 | no | — |
| cweIdXpath | The XPath query that selects CWE ID numbers from the CWE list file | no | — |
| securityStandardTag | The security standard tag to add to the SARIF file, defaults to "owasp-top10-2021" | no | — |
| outputFile | The output SARIF file path, defaults to the input SARIF file path | no | — |
Outputs
no outputs