sarif-web-component

sarif-web-component copied to clipboard

Microsoft mandatory file

1

Bhadboilamba

Hi. I'm using this component on my website to show some scanning results, and now I'm facing a problem. Comparing to the Sarif VSCode extension, I found this component does...

arronlai

Branch data from versionControlProvenance is not processed

1

On Azure DevOps the links from scan tab after running pipeline to the files from repo do not contain branch data and provide to the last chosen repository. The versionControlProvenance...

dgizer

Add CodeQL workflow for GitHub code scanning

1

Hi `microsoft/sarif-web-component`! This is a one-off automatically generated pull request from LGTM.com :robot:. You might have heard that we’ve integrated LGTM’s underlying CodeQL analysis engine natively into GitHub. The result...

lgtm-com[bot]

Bug: Latest github-pages deployment does not support Azure DevOps (ADO) line numbers (deep linking)

5

### Problem Deep linking to the line numbers is not working in the published version of this extension (as of 5/24/2022). I see the code to support ADO line numbers...

johnemau

This allows for frequent updates to the site, while not having those updates clutter the commit history for this repo.

jeffersonking

Support for SARIF v1

1

Are there any plans or would you consider adding support for SARIF v1.0.0 files? In the _Scans_ tab we are currently reaching the intended pre-SARIF-2.1 warning message:  https://github.com/microsoft/sarif-web-component/blob/8ac57c88197b2101227af1288c5249cf62353b3c/components/Viewer.tsx#L130

andren

Add filtering based on Rule, Tag, and Result Kind

2

For triaging, especially a large sarif, it is helpful to be able to filter based on attributes of the results.

gfs

If a snippet is not included no line/column information is shown

2

If an issue does not have an associated snippet there is no information given about the line/column for the issue. It is embedded instead in the link shown.

gfs

Apply Syntax Hilighting to Code Snippets

2

It would be great for embedded snippets to have syntax highlighting applied to them to make it easier to read the code.

gfs