microsoft / microsoft/ApplicationInspector
Add Code Flow Report when Present to Sarif Viewer Results
Open
Nobody has claimed this yet.
enhancement
sarifviewer
- Dominant language
- C#
- Stars
- 4.4k
- Forks
- 366
- Avg merge
- 6d 7h
- Merged PRs (30d)
- 3
Description
Application Inspector does not generate code flow results but CodeQL does. The Sarif Viewer should support viewing codeflow results when they are present.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the SARIF Viewer result-rendering entry point and existing handling for CodeQL or code flow data. Confirm how code flow results are represented in the SARIF input, then make the viewer display them when present and verify that results without code flows still render correctly.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- csharp
- Domain
- security, tooling
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 38/100