-
Notifications
You must be signed in to change notification settings - Fork 346
Description
pio check
currently either emits text or JSON (with --json-output
). it'd be great if it could emit SARIF files, so that they can be uploaded to GitHub which would show them as code scanning results on PRs & co.
in case it is not possible to emit SARIF then it would be nice if instead a GitHub action could be provided which can use the generated JSON to create a GitHub check result (though probably converting from JSON to SARIF might be easier?).
the advantage of emitting SARIF is that it isn't bound to GitHub: it is an open standard also supported by other tools, so users which are not hosting their code on GitHub would also profit from this.
the cicd-setup example should then be updated to use this (and maybe include an intentionally introduced warning just to show that it's being shown?)
EDIT: sorry, i just realised that i opened this in platformio-docs
rather than platformio-core
; could you please move the ticket?
(i initially started to open the ticket here to ask for documentation on how to do this, but then realised that most likely it simply isn't possible right now and thus wrote the ticket as a feature request against pio check
rather than a simple docs update request)