mirror of
https://github.com/KeygraphHQ/shannon.git
synced 2026-08-15 16:00:29 +02:00
docs: frame SARIF as a standard rather than a GitHub feature
SARIF 2.1.0 is the OASIS interchange format for static analysis results. The copy read as though it existed to feed GitHub code scanning, which undersells it for anyone on another platform. GitHub Actions stays as the worked example; the format is described as vendor-neutral. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
co-authored by
Claude Opus 5
parent
95e25455a0
commit
61abe5ecbe
@@ -54,6 +54,8 @@ Pass an explicit workspace name with `-w` so the `logs` command has a determinis
|
||||
|
||||
## SARIF Output
|
||||
|
||||
SARIF 2.1.0 is the OASIS standard interchange format for static analysis results. Any tool that reads SARIF ingests `report.sarif` unchanged, so the GitHub Actions example below is one consumer among many, not a requirement.
|
||||
|
||||
SARIF is opt-in. Enable it in a configuration file:
|
||||
|
||||
```yaml
|
||||
|
||||
Reference in New Issue
Block a user