fix(sarif): point informationUri at git.trevon.dev #2

Merged
trevon merged 1 commit from fix/forgejo-home into master 2026-09-28 12:05:55 +00:00
2 changed files with 3 additions and 1 deletions
Showing only changes of commit b03c8615ca - Show all commits

fix(sarif): point informationUri at git.trevon.dev
Some checks failed
build / build-linux (pull_request) Failing after 8m12s
build / build-macos (pull_request) Has been cancelled
build / release (pull_request) Has been cancelled

fold lives only on git.trevon.dev, but every SARIF report advertised
https://github.com/trvon/fold as the tool's information URI, so code
scanning UIs and SARIF viewers linked readers to a repository fold no
longer uses. The driver now points at https://git.trevon.dev/trevon/fold.

test_scan_e2e asserts the URI; it failed before this change.
trvon 2026-09-25 08:07:37 -06:00
Signed by: trevon
GPG key ID: 38686EA797D7A8A7

View file

@ -411,7 +411,7 @@ void writeFilteredSarif(std::ostream& out, const std::vector<Finding>& findings,
{
{"name", "fold"},
{"version", foldVersion()},
{"informationUri", "https://github.com/trvon/fold"},
{"informationUri", "https://git.trevon.dev/trevon/fold"},
{"properties",
{
{"z3_version", Z3_get_full_version()},

View file

@ -101,6 +101,8 @@ TEST_CASE("SARIF keeps stable rule metadata for structural findings", "[sarif]")
const auto& driver = sarif["runs"][0]["tool"]["driver"];
const auto& results = sarif["runs"][0]["results"];
// fold lives only on git.trevon.dev; SARIF consumers follow this link.
REQUIRE(driver["informationUri"] == "https://git.trevon.dev/trevon/fold");
REQUIRE(results[0]["ruleId"] == "fold.clone");
REQUIRE(results[0]["properties"]["backend"] == "clang");
REQUIRE(results[1]["ruleId"] == "fold.high-complexity");