Added findings unique ID for SARIF report

spark1security · Jul 28, 2024 · 6ba0b14 · 6ba0b14
1 parent 72c4bc7
commit 6ba0b14
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/n0s1/reporting/report_sarif.py b/src/n0s1/reporting/report_sarif.py
@@ -82,6 +82,7 @@ def add_vulns(self, n0s1_data: dict):
                 ruleId = match_id
                 match_description = match.get("description", "")
                 ruleIndex = self.get_rule_index(ruleId)
+                finding_id = d.get("id", "None")
 
                 if ruleId not in self.seen_rules:
                     self.rules.append(
@@ -110,7 +111,7 @@ def add_vulns(self, n0s1_data: dict):
                         "locations": [
                             {
                                 "physicalLocation": {
-                                    "artifactLocation": {"uri": "None", "uriBaseId": "ROOTPATH"},
+                                    "artifactLocation": {"uri": finding_id, "uriBaseId": "ROOTPATH"},
                                     "region": {
                                         "startLine": 1,
                                         "startColumn": 1,