You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Is your feature request related to a problem? Please describe.
Currently the Kics Sarif output format uses the Error, Warning etc format for output in sarif.
This does not play 100% nicely with GitHub which works best with a Critical, High etc format.
It means that Kics results are not seen at the same level as my other app sec tooling and I do not see them in security dashboard overview charts etc.
Describe the solution you'd like
I would like there to be an output format for GitHub that gives the results in a format that plays best with Advanced Security.
Is your feature request related to a problem? Please describe.
Currently the Kics Sarif output format uses the
Error
,Warning
etc format for output in sarif.This does not play 100% nicely with GitHub which works best with a
Critical
,High
etc format.It means that Kics results are not seen at the same level as my other app sec tooling and I do not see them in security dashboard overview charts etc.
I can see in the sarif code that you convert from
Critical
toError
etc https://github.com/Checkmarx/kics/blob/master/pkg/report/model/sarif.go#L17-L23Describe the solution you'd like
I would like there to be an output format for GitHub that gives the results in a format that plays best with Advanced Security.
Someone from GitHub has given a solution on the Kics Action repo here Checkmarx/kics-github-action#99
Describe alternatives you've considered
In all honesty not using Kics and using another tool that integrates better.
Additional context
Kics results have their own ratings separate to the main GitHub supported ones
Means that Kics doesn't feature in any reports or trend analysis etc where as other 3rd party tools do
The text was updated successfully, but these errors were encountered: