for sarif
{
"ruleId": "CKV_SECRET_3",
"ruleIndex": 21,
"level": "error",
"message": {
"text": "Azure Storage Account access key"
},
"locations": [
{
"physicalLocation": {
"artifactLocation": {
"uri": "tools/bin/RedacteA/RedacteB/RedacteB.deps.json"
},
"region": {
"startLine": 953,
"endLine": 954,
"snippet": {
"text": " \"REMOVED\n"
}
}
}
}
],
},
{
"ruleId": "CKV_SECRET_3",
"ruleIndex": 21,
"level": "error",
"message": {
"text": "Azure Storage Account access key"
},
"locations": [
{
"physicalLocation": {
"artifactLocation": {
"uri": "tools/bin/RedacteA/RedacteB/RedacteB.deps.json"
},
"region": {
"startLine": 960,
"endLine": 961,
"snippet": {
"text": " \"REMOVED,\n"
}
}
}
}
],
},
produced html
ools/bin/RedacteA/RedacteB/RedacteB.deps.json:953
ools/bin/RedacteA/RedacteB/RedacteB.deps.json:960
but it should have produced
RedacteB.deps.json:953
RedacteB.deps.json:960
or
tools/bin/RedacteA/RedacteB/RedacteB.deps.json:953
tools/bin/RedacteA/RedacteB/RedacteB.deps.json:960
but it certainty shouldn't be just pulling the t off
for sarif
{ "ruleId": "CKV_SECRET_3", "ruleIndex": 21, "level": "error", "message": { "text": "Azure Storage Account access key" }, "locations": [ { "physicalLocation": { "artifactLocation": { "uri": "tools/bin/RedacteA/RedacteB/RedacteB.deps.json" }, "region": { "startLine": 953, "endLine": 954, "snippet": { "text": " \"REMOVED\n" } } } } ], }, { "ruleId": "CKV_SECRET_3", "ruleIndex": 21, "level": "error", "message": { "text": "Azure Storage Account access key" }, "locations": [ { "physicalLocation": { "artifactLocation": { "uri": "tools/bin/RedacteA/RedacteB/RedacteB.deps.json" }, "region": { "startLine": 960, "endLine": 961, "snippet": { "text": " \"REMOVED,\n" } } } } ], },produced html
but it should have produced
or
but it certainty shouldn't be just pulling the
toff