SARIF

SARIF

OASIS Static Analysis Results Interchange Format (SARIF)

Useful for passing results between tools

Sonarqube , GitHub , Defect Dojo

Extension for Visual Studio Code

Alternatives

Trivy template for SonarQube

Grype output templates (see grype-contrib )

Demo: SARIF

Generate SARIF report using trivy

Generate SARIF report using grype