Cosmin Cojocar
be8bd6e40b
Populate the fixes only when autofix is not empty ( #1226 )
...
Change-Id: If4de66d1ea0fd5a179808d023fdac677437c6d5a
Signed-off-by: Cosmin Cojocar <ccojocar@google.com>
2024-09-18 13:43:01 +02:00
Cosmin Cojocar
abfe8cfd6d
Update the SARIF schema URL ( #1217 )
...
Change-Id: I4a19f289ed6c4da8277bcc30be7c905ca13b6898
Signed-off-by: Cosmin Cojocar <ccojocar@google.com>
2024-09-09 15:36:18 +02:00
Cosmin Cojocar
0ce4453ddd
Rollback the SARIF version to 2.1 since github doesn't support 2.2 ( #1210 )
...
Change-Id: If3500ec2c522339ca0a4e6c1f58574ce3cc870a9
Signed-off-by: Cosmin Cojocar <ccojocar@google.com>
2024-09-04 16:56:15 +02:00
Tran The Lam
56f943b802
Add support to generate auto fixes using LLM (AI) ( #1177 )
...
This feature adds support to generate auto fixes for Go scanning findings using LLM (AI). In a first instance, it relies on Gemini API to get a suggestion for a solution. This can be later extended, to integrate also other AI providers.
---------
Signed-off-by: Cosmin Cojocar <ccojocar@google.com>
Co-authored-by: ccoVeille <3875889+ccoVeille@users.noreply.github.com>
Co-authored-by: Cosmin Cojocar <ccojocar@google.com>
2024-08-12 12:52:41 +02:00
Oleksandr Redko
09cf6efb3e
Fix typos in struct fields, comments, and docs ( #1023 )
2023-10-05 12:59:17 +02:00
Oleksandr Redko
1f689968ec
Fix typos in comments, vars and tests
2023-05-30 08:26:41 +02:00
Matthieu MOREL
d6aeaad931
correct gci linter ( #946 )
...
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
2023-03-30 09:31:24 +02:00
Cosmin Cojocar
83fc5e63fa
Fix lint warning
2023-03-20 10:25:45 +01:00
Cosmin Cojocar
27bf0e4f9b
Fix rule index reference into sarif report ( #934 )
2023-02-21 11:43:38 +01:00
Cosmin Cojocar
de2c6a36fa
Extract the issue in its own package
2023-02-16 09:45:28 +01:00
Cosmin Cojocar
19fa856bad
fix: make sure that nil Cwe pointer is handled when getting the CWE ID
2022-08-20 13:32:31 +02:00
Cosmin Cojocar
c0680bb6a3
Process the code snippet before adding it to the SARIF report
...
Preprocess the code snippet from the issue in order to extract only the line(s)
of code where the issue is located. In addition remove the line numbers and whitespaces
before writing the code snippet into the SARIF report.
2022-02-09 16:19:40 +01:00
Cosmin Cojocar
09a2941ad4
Use the CWE name as a name in the SARIF report
2022-01-27 15:51:51 +01:00
Cosmin Cojocar
ad5d74d5a1
Update to ginkgo v2 ( #753 )
2022-01-03 18:11:35 +01:00
Yiwei Ding
b45f95f6ad
Add support for suppressing the findings
2021-12-09 11:53:36 +01:00
Ville Skyttä
f1f0056a90
Spelling fixes ( #717 )
2021-11-09 21:02:24 +01:00
Matthieu MOREL
bfb0f422fe
chore(lint): enable errorlint and gci ( #698 )
2021-09-13 09:40:10 +02:00
Matthieu MOREL
731d0d51ce
Results must always be present in the SARIF report ( #650 )
...
* Don't omit empty results
* Add tests
2021-06-17 14:21:42 +02:00
Matthieu MOREL
e72b1e5f25
Use of vars instead of func
2021-06-13 13:30:16 +02:00
Matthieu MOREL
1256f16f33
Fix lint and fail on error in the ci build
2021-05-31 10:44:12 +02:00
Matthieu MOREL
d040f0725f
Handle gosec version in SARIF report
2021-05-20 10:16:42 +02:00
Matthieu MOREL
3a9a6ad8b3
Sarif provide Snippet with Issue.Code
...
* Provide Snippet with Issue.Code
* Fix documentation
2021-05-13 16:02:28 +02:00
Matthieu MOREL
103c429df5
Enable golangcli and improve testing for formatters
2021-05-10 10:08:04 +02:00
Matthieu MOREL
4df7f1c3e9
Fix typos, Go Report link and Gofmt
2021-05-07 18:04:01 +02:00
Matthieu MOREL
c4f5932ab7
Refactor : Replace Cwe with cwe.Weakness
2021-05-07 16:54:34 +02:00
Matthieu MOREL
ddfa25381f
Define a report package with core and per format sub-packages
2021-05-06 09:31:51 +02:00
