Skip to content

Navigation Menu

Appearance settings

View all features
- BY COMPANY SIZE
  Enterprises
  Small and medium teams
  Startups
  Nonprofits
- BY USE CASE
  App Modernization
  DevSecOps
  DevOps
  CI/CD
  View all use cases
- BY INDUSTRY
  Healthcare
  Financial services
  Manufacturing
  Government
  View all industries
View all solutions
- EXPLORE BY TOPIC
  AI
  Software Development
  DevOps
  Security
  View all topics
- EXPLORE BY TYPE
  Customer stories
  Events & webinars
  Ebooks & reports
  Business insights
  GitHub Skills
- SUPPORT & SERVICES
  Documentation
  Customer support
  Community forum
  Trust center
  Partners
- COMMUNITY
  GitHub SponsorsFund open source developers
- PROGRAMS
  Security Lab
  Maintainer Community
  Accelerator
  Archive Program
- REPOSITORIES
  Topics
  Trending
  Collections
- ENTERPRISE SOLUTIONS
  Enterprise platformAI-powered developer platform
- AVAILABLE ADD-ONS
  GitHub Advanced SecurityEnterprise-grade security features
  Copilot for BusinessEnterprise-grade AI features
  Premium SupportEnterprise-grade 24/7 support
Pricing

Search code, repositories, users, issues, pull requests...

Search

Clear

Search syntax tips

Provide feedback

We read every piece of feedback, and take your input very seriously.

Include my email address so I can be contacted

Saved searches

Use saved searches to filter your results more quickly

Name

Query

To see all available qualifiers, see our documentation.

Appearance settings

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

danmar / cppcheck Public

Notifications You must be signed in to change notification settings
Fork 1.5k
Star 6.5k

Code
Pull requests 179
Actions
Security
Insights

Additional navigation options

Code
Pull requests
Actions
Security
Insights

Add SARIF output support.#4651

Closed

mario-campos wants to merge 46 commits intodanmar:maindanmar/cppcheck:mainfrom

mario-campos:mario-campos/sarifmario-campos/cppcheck:mario-campos/sarifCopy head branch name to clipboard

Conversation Commits46 (46)Checks Files changed

Closed

Add SARIF output support.#4651
mario-campos wants to merge 46 commits intodanmar:mainfrom
mario-campos:mario-campos/sarif

Commits

Commits on Dec 22, 2022

Refactor XML output through the new `XMLAnalysisReport` class.
mario-campos
committed
Refactor out CLI error messages into the new class `CLIAnalysisReport`.
mario-campos
committed
Change snake-cased `add_finding` to camelCased `addFinding`.
mario-campos
committed
Add SARIF output format with the new `SARIFAnalysisReport` class.
mario-campos
committed
Reformat files to fix warnings.
mario-campos
committed
Include externals/picojson for building cppcheck CLI with cmake.
mario-campos
committed
Abstract classes must implement a destructor, even if its virtual.
mario-campos
committed
Add a parameter name to the XMLAnalysisReport method.
mario-campos
committed
Use std::unique_ptr instead of new/free.
mario-campos
committed
Output severity in SARIF report.
mario-campos
committed
Output precision in SARIF report.
mario-campos
committed
Output line/column numbers in SARIF report.
mario-campos
committed
Unify spacing and alignment in std::map literal.
mario-campos
committed
Unify spacing around std::map literals.
mario-campos
committed
Change static methods to static functions.
mario-campos
committed
Fix SARIF report by making `runs` property an array.
mario-campos
committed
Include Cppcheck homepage URL to SARIF report.
mario-campos
committed
Add SARIFAnalysisReport documentation as comment.
mario-campos
committed
Add missing <memory> include to use `std::unique_ptr`.
mario-campos
committed
Fix `switch`/`case` alignment to please uncrustify.
mario-campos
committed
Fix clang-tidy findings.
mario-campos
committed
Add analysis report objects to Makefile's testrunner target.
mario-campos
committed
Fix --errorlist by hoisting mReport assignment earlier in the code.
mario-campos
committed
Check (and error) if XML and SARIF outputs are both specified.
mario-campos
committed
Fix XML pretty-print by appending new-line to XML error message.
mario-campos
committed
Add CLI system test to test that the SARIF file has expected structure/properties.
mario-campos
committed
Rename *AnalysisReport::emit() to serialize().
mario-campos
committed
Fix forgotten `sarif` field initialization in settings.cpp.
mario-campos
committed
Refactor duplicate-branch conditional statement.
mario-campos
committed
Put `sarif` property in alphabetical order of other properties.
mario-campos
committed
Refactor SARIFAnalysisReport::addFinding() from 2 to 1 line!
mario-campos
committed
Fix XML alignment by adding missing newline character.
mario-campos
committed
Undo changes to merge CLI findings into separate class.
mario-campos
committed

Commits on Jan 10, 2023

`std::move` more objects in sarifanalysisreport.cpp.
mario-campos
committed
Use range-based for loop for SARIF generation.
mario-campos
committed
Use constant reference.
mario-campos
committed
Improve error message to be more helpful.
mario-campos
committed
Add CLIAnalysisReport class for outputting findings to CLI.
mario-campos
committed
Indent the member initialization for uncrusty.
mario-campos
committed

Commits on Jan 11, 2023

Fix the extra new-line character that was added.
mario-campos
committed
Use `--output-format` instead of `--sarif`.
mario-campos
committed
Use move semantics for SARIF generation if PicoJSON supports it.
mario-campos
committed
Fix tests by using `--output-format=xml` instead of `--xml`.
mario-campos
committed
Forgot to include windows.h for Windows OSes.
mario-campos
committed
Fix selfcheck and clang-tidy warnings about passing std::string by value.
mario-campos
committed
Need to link the *analysisreport.o object files for testrunner.
mario-campos
committed

Footer

© 2026 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Community
Docs
Contact

You can’t perform that action at this time.