Developer reports

SARIF findings summary

Group repeated SARIF results by rule, level, first location and message.

Your inputs

Start with an example

SARIF 2.1.0 JSON

{
  "version": "2.1.0",
  "runs": [
    {
      "tool": {
        "driver": {
          "name": "Example"
        }
      },
      "results": [
        {
          "ruleId": "R1",
          "message": {
            "text": "Example finding"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "a.c"
                },
                "region": {
                  "startLine": 4
                }
              }
            }
          ]
        },
        {
          "ruleId": "R1",
          "message": {
            "text": "Example finding"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "a.c"
                },
                "region": {
                  "startLine": 4
                }
              }
            }
          ]
        },
        {
          "ruleId": "R2",
          "level": "note",
          "message": {
            "text": "Another finding"
          }
        }
      ]
    }
  ]
}

Your inputs stay in your browser.

Your result

Example result

How it works

Use a grouping key of rule ID, level, first artifact URI, start line/column and message. Count every occurrence.

The sample contains three result records and two distinct findings.

Limits

A reporting view, not SARIF schema validation. Only the first physical location is used; URI bases, suppression state and fingerprint equivalence are not resolved.

OASIS SARIF 2.1.0 ↗

SARIF findings summary

Your inputs

Your result

How it works

Limits

Related tools

SBOM reference checker↗

Protobuf descriptor import order↗

SBOM reference checker

Protobuf descriptor import order