OASIS Static Analysis Results Interchange Format (SARIF)
Useful for passing results between tools
Sonarqube , GitHub , Defect Dojo
Extension for Visual Studio Code
Trivy template for SonarQube
Grype output templates (see grype-contrib )
Generate SARIF report using trivy
Generate SARIF report using grype