Skip to content

Conversation

@mridang
Copy link

@mridang mridang commented Nov 4, 2025

This PR introduces a new output format, sarif, which generates reports compliant with the Static Analysis Results Interchange Format (SARIF 2.1.0).

This allows kubeconform to integrate directly with tools like GitHub Code Scanning, VS Code extensions, and other CI/CD platforms that support SARIF.

  • Adds the -output sarif flag.
  • Maps all kubeconform validation statuses (Valid, Invalid, Error, Skipped) to the correct SARIF rules and severity levels.
  • Iterates over ValidationErrors to create distinct results for each issue, populating the logicalLocation with the JSON path of the error (e.g., spec.replicas).
  • Is concurrency-safe.

Will add support for #99

@mridang
Copy link
Author

mridang commented Nov 8, 2025

Hi @yannh, would you be so kind to review this? Happy to make any changes as needed. 🙏

@yannh
Copy link
Owner

yannh commented Nov 8, 2025

Hi @mridang , I will review this soon! thank you!

@mridang
Copy link
Author

mridang commented Nov 8, 2025

My bad. Enjoy the vacays man - code can always wait. 🌴🏝️🏝️🌴

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants