It appears like Visual Studio 2019 with SARIF viewer extension is not working quite well.
Visual Studio is expecting the version attribute to be at the top! When we do to_json(sarif schema) the attributes are getting sorted alphabetically so the runs attribute is on the top and version is at the bottom. We need to find a workaround for this
Vulnerability consolidation and management tool, enhances scan results by merging different findings of the same weakness across multiple static/dynamic scans
SAST Scanner Modified - Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure DevOps, Google CloudBuild, VS Code and Visual Studio. No server required!
How to secure your development pipeline with static application security test (SAST) / Dynamic application security test (DAST), software composition analysis (SCA) using Sonarqube.
It appears like Visual Studio 2019 with SARIF viewer extension is not working quite well.
to_json(sarif schema)the attributes are getting sorted alphabetically so therunsattribute is on the top and version is at the bottom. We need to find a workaround for this