From b03c8615cad9270ade1aa6709b68ef2fdc36e380 Mon Sep 17 00:00:00 2001 From: trvon Date: Fri, 25 Sep 2026 08:07:37 -0600 Subject: [PATCH] fix(sarif): point informationUri at git.trevon.dev fold lives only on git.trevon.dev, but every SARIF report advertised https://github.com/trvon/fold as the tool's information URI, so code scanning UIs and SARIF viewers linked readers to a repository fold no longer uses. The driver now points at https://git.trevon.dev/trevon/fold. test_scan_e2e asserts the URI; it failed before this change. --- src/report/sarif.cpp | 2 +- tests/integration/test_scan_e2e.cpp | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/src/report/sarif.cpp b/src/report/sarif.cpp index 0377718..ea7b883 100644 --- a/src/report/sarif.cpp +++ b/src/report/sarif.cpp @@ -411,7 +411,7 @@ void writeFilteredSarif(std::ostream& out, const std::vector& findings, { {"name", "fold"}, {"version", foldVersion()}, - {"informationUri", "https://github.com/trvon/fold"}, + {"informationUri", "https://git.trevon.dev/trevon/fold"}, {"properties", { {"z3_version", Z3_get_full_version()}, diff --git a/tests/integration/test_scan_e2e.cpp b/tests/integration/test_scan_e2e.cpp index a645c11..160488a 100644 --- a/tests/integration/test_scan_e2e.cpp +++ b/tests/integration/test_scan_e2e.cpp @@ -101,6 +101,8 @@ TEST_CASE("SARIF keeps stable rule metadata for structural findings", "[sarif]") const auto& driver = sarif["runs"][0]["tool"]["driver"]; const auto& results = sarif["runs"][0]["results"]; + // fold lives only on git.trevon.dev; SARIF consumers follow this link. + REQUIRE(driver["informationUri"] == "https://git.trevon.dev/trevon/fold"); REQUIRE(results[0]["ruleId"] == "fold.clone"); REQUIRE(results[0]["properties"]["backend"] == "clang"); REQUIRE(results[1]["ruleId"] == "fold.high-complexity"); -- 2.52.0