docs: frame SARIF as a standard rather than a GitHub feature

SARIF 2.1.0 is the OASIS interchange format for static analysis results.
The copy read as though it existed to feed GitHub code scanning, which
undersells it for anyone on another platform. GitHub Actions stays as the
worked example; the format is described as vendor-neutral.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
george-keygraph
2026-08-13 17:09:59 -07:00
co-authored by Claude Opus 5
parent 95e25455a0
commit 61abe5ecbe
3 changed files with 12 additions and 8 deletions
+2
View File
@@ -54,6 +54,8 @@ Pass an explicit workspace name with `-w` so the `logs` command has a determinis
## SARIF Output
SARIF 2.1.0 is the OASIS standard interchange format for static analysis results. Any tool that reads SARIF ingests `report.sarif` unchanged, so the GitHub Actions example below is one consumer among many, not a requirement.
SARIF is opt-in. Enable it in a configuration file:
```yaml