Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Sarif integration for Dependabot #11254

Open
1 task done
taras opened this issue Jan 8, 2025 · 0 comments
Open
1 task done

Sarif integration for Dependabot #11254

taras opened this issue Jan 8, 2025 · 0 comments
Labels
T: feature-request Requests for new features

Comments

@taras
Copy link

taras commented Jan 8, 2025

Is there an existing issue for this?

  • I have searched the existing issues

Feature description

One of the large organizations that I work with would like to start using CodeQL and the code-scanning API to download Sarif files and run analysis on them offline. We were surprised to find out that Dependabot doesn't seem to have any integration with Sarif. The ideal integration would be to be able to download Dependabot results via the code scanning API, but we'd also settle for the ability to download Serif files from the dependable results endpoint.

Do you have any plans to make Dependabot results available via Sarif?
@taras taras added the T: feature-request Requests for new features label Jan 8, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
T: feature-request Requests for new features
Projects
Dependabot
Status: No status
Milestone
No milestone
Development

No branches or pull requests
1 participant
@taras