actions/gosec
1
0
Fork 0
mirror of https://github.com/securego/gosec.git synced 2024-12-24 11:35:52 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix for SARIF output when Issue.Line contains a range

Browse source
This commit is contained in:
K 2021-01-04 16:38:41 -08:00 committed by Cosmin Cojocar
parent a5911ad7bb
commit 41ea431779
1 changed files with 13 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
output/sarif_format.go
View file

@ -35,6 +35,7 @@ type sarifArtifactLocation struct {
type sarifRegion struct { type sarifRegion struct {
StartLine uint64 `json:"startLine"` StartLine uint64 `json:"startLine"`
EndLine uint64 `json:"endLine"`
StartColumn uint64 `json:"startColumn"` StartColumn uint64 `json:"startColumn"`
EndColumn uint64 `json:"endColumn"` EndColumn uint64 `json:"endColumn"`
} }
@ -114,10 +115,19 @@ func buildSarifRule(issue *gosec.Issue) *sarifRule {
func buildSarifLocation(issue *gosec.Issue, rootPaths []string) (*sarifLocation, error) { func buildSarifLocation(issue *gosec.Issue, rootPaths []string) (*sarifLocation, error) {
var filePath string var filePath string
line, err := strconv.ParseUint(issue.Line, 10, 64) lines := strings.Split(issue.Line, "-")
startLine, err := strconv.ParseUint(lines[0], 10, 64)
if err != nil { if err != nil {
return nil, err return nil, err
} }
endLine := startLine
if len(lines) > 1 {
endLine, err = strconv.ParseUint(lines[1], 10, 64)
if err != nil {
return nil, err
}
}
col, err := strconv.ParseUint(issue.Col, 10, 64) col, err := strconv.ParseUint(issue.Col, 10, 64)
if err != nil { if err != nil {
return nil, err return nil, err
@ -135,7 +145,8 @@ func buildSarifLocation(issue *gosec.Issue, rootPaths []string) (*sarifLocation,
URI: filePath, URI: filePath,
}, },
Region: &sarifRegion{ Region: &sarifRegion{
StartLine: line, StartLine: startLine,
EndLine: endLine,
StartColumn: col, StartColumn: col,
EndColumn: col, EndColumn: col,
}, },