securesauce/precli

SARIF output does not conform to schema

Closed this issue · 0 comments

Describe the bug
In a test of SARIF output, see https://github.com/securesauce/examples/actions/runs/8144798141,
the output did not conform to the standard defined by the schema and thus failed.

To Reproduce
Steps to reproduce the behavior:

  1. Create a GitHub action workflow to run precli with sarif output
  2. Check the results.

https://github.com/securesauce/examples/actions/runs/8144798141/job/22259679898

Error details: instance.runs[0].results[0].message is not of a type(s) object
Error details: instance.runs[0].results[0].analysisTarget is not of a type(s) object
Error details: instance.runs[0].results[0].fixes[0].description is not of a type(s) object
Error details: instance.runs[0].results[0].fixes[0].artifactChanges[0].replacements is not of a type(s) array

Expected behavior
No errors

Version

0.3.7

Additional context
n/a