t.behrendt/sec-actions
0
0
Fork 0
Code Issues 2 Pull Requests Actions Activity

feat: add merge-sarif #37

Merged
t.behrendt merged 5 commits from feat-add-merge-sarif into main 2026-02-15 12:07:03 +01:00
Conversation 1 Commits 5 Files Changed 5
+7
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 785aa30ee8 - Show all commits
.gitea/workflows/ci.yaml
+7
View File
@@ -98,8 +98,15 @@ jobs:
output-file: merged.sarif output-file: merged.sarif
- name: Check merged SARIF file - name: Check merged SARIF file
run: | run: |
# Structure: version, schema, 2 runs
run_count=$(jq '.runs | length' merged.sarif) run_count=$(jq '.runs | length' merged.sarif)
[ "$run_count" -eq 2 ] || { echo "FAIL: expected 2 runs, got $run_count"; exit 1; } [ "$run_count" -eq 2 ] || { echo "FAIL: expected 2 runs, got $run_count"; exit 1; }
echo "Merged SARIF has $run_count runs." echo "Merged SARIF has $run_count runs."
jq -e '.version and .["$schema"] and (.runs | length > 0)' merged.sarif >/dev/null || { echo "FAIL: invalid SARIF structure"; exit 1; } jq -e '.version and .["$schema"] and (.runs | length > 0)' merged.sarif >/dev/null || { echo "FAIL: invalid SARIF structure"; exit 1; }
# Content: results from test_sarif1.json (ruleId KSV-0014) and test_sarif2.json (ruleId CVE-2026-26019) must be present
rule_ids=$(jq -r '[.runs[].results[].ruleId] | unique[]' merged.sarif)
echo "$rule_ids" | grep -q 'KSV-0014' || { echo "FAIL: merged file missing result from test_sarif1.json (ruleId KSV-0014)"; exit 1; }
echo "$rule_ids" | grep -q 'CVE-2026-26019' || { echo "FAIL: merged file missing result from test_sarif2.json (ruleId CVE-2026-26019)"; exit 1; }
echo "Merged results contain ruleIds from both input files."
echo "All checks passed." echo "All checks passed."