mirror of
https://github.com/hashicorp/vault.git
synced 2026-07-09 09:14:52 -04:00
ea9b0c636f
* [VAULT-46753] pipeline(sarif): add support for converting Sarif into Zap format Add a `covert-zap` sub-command to the pipeline utility for converting SARIF reports into a Zap format. We then utilize the new utility as part of our DAST/Zap scans to automatically convert the SARIF to Zap style XML JSON which we can feed into Concert. As part of this we do a small refactor of the Sarif CVE report. - Add `pipeline sarif convert-zap` command. - Integrate the `covert-zap` into our DAST scanning workflows. - Refactor `pipeline sarif cve-report` to be more idiomatic of the pipeline tool. - Format the pipeline tool with the latest version of gofumpt. - Update to the latest Go modules. Signed-off-by: Ryan Cragun <me@ryan.ec> Co-authored-by: Ryan Cragun <me@ryan.ec> |
||
|---|---|---|
| .. | ||
| codechecker | ||
| instana-uploader | ||
| pipeline | ||
| semgrep | ||
| stubmaker | ||
| testimagemaker | ||
| tools.go | ||
| tools.sh | ||