fix: generate correct sarif for scan result without vulns

sysdiglabs · Feb 12, 2025 · 3fed416 · 3fed416
1 parent 062c8a8
commit 3fed416
Show file tree

Hide file tree

Showing 4 changed files with 5,248 additions and 312 deletions.
diff --git a/src/sarif.ts b/src/sarif.ts
@@ -53,7 +53,7 @@ export function generateSARIFReport(data: Report, groupByPackage: boolean) {
   fs.writeFileSync("./sarif.json", JSON.stringify(sarifOutput, null, 2));
 }
 
-function vulnerabilities2SARIF(data: Report, groupByPackage: boolean) {
+export function vulnerabilities2SARIF(data: Report, groupByPackage: boolean) {
   let rules: SARIFRule[] = [];
   let results: SARIFResult[] = [];
 
@@ -63,10 +63,6 @@ function vulnerabilities2SARIF(data: Report, groupByPackage: boolean) {
     [rules, results] = vulnerabilities2SARIFRes(data)
   }
 
-  if (!rules.length || !results.length) {
-    return {};
-  }
-
   const runs = [{
     tool: {
       driver: {