sarif-web-component icon indicating copy to clipboard operation
sarif-web-component copied to clipboard

Branch data from versionControlProvenance is not processed

Open dgizer opened this issue 4 years ago • 1 comments

On Azure DevOps the links from scan tab after running pipeline to the files from repo do not contain branch data and provide to the last chosen repository. The versionControlProvenance is filled in the following way: "versionControlProvenance": [{ "repositoryUri": "https://dev.azure.com/xtest-devel/example/_git/example", "branch": "refs/heads/main", "mappedTo": { "uriBaseId": "ROOT_1_main" } } ], The locatins part from results is filled in the following way: "results": [{ "locations": [{ "physicalLocation": { "artifactLocation": { "uri": "demo/src/main/java/examples/nbank/Customer.java", "uriBaseId": "ROOT_1_main" }, "region": { "startLine": 89, "startColumn": 41, "endColumn": 42 } } } ] }] Scan tabs looks like on the screenshot 2021-09-23_12h32_19 The produced link for demo/src/main/java/examples/nbank/Customer.java is like this: https://dev.azure.com/devel/example/_git/example?path=demo%2Fsrc%2Fmain%2Fjava%2Fexamples%2Fnbank%2FCustomer.java

dgizer avatar Sep 23 '21 10:09 dgizer

Is there a resolution available for this issue?

smitanv avatar Jul 13 '23 18:07 smitanv