Skip to content

Releases: hohn/sarif-cli

duckdb-from-sarif

21 Oct 16:39

Choose a tag to compare

duckdb-from-sarif Pre-release
Pre-release

This is a duckdb database formed from about 25,000 sarif files. The column format is subject to change.

currently, it looks like this:

0:$ duckdb sarif_master_1.duckdb
DuckDB v1.4.1 (Andium) b390a7c376
Enter ".help" for usage hints.
D .tables
sarif_results
D select count(*) from sarif_results;
┌─────────────────┐
│  count_star()   │
│      int64      │
├─────────────────┤
│    11671204     │
│ (11.67 million) │
└─────────────────┘
D .mode line
D select * from sarif_results limit 1;
   sarif_file = ./repos/Restream/reindexer/code-scanning/codeql/databases/cpp/db.db/codeql.sarif
    unique_id = d4a9279179b32206d6c51930dc1d4bf8382689c4
         runi = 0
         resi = 0
       codefi = NULL
      threadi = NULL
         loci = NULL
related_index = NULL
 artifact_uri = cpp_src/core/nsselecter/querypreprocessor.cc
           l1 = 1117
           c1 = 27
           l2 = 1372
           c2 = 3
     line_num = NULL
     msg_type = RESULT
      message = Block with too many statements (9 complex statements in the block).
  source_line =
      rule_id = cpp/complex-block

The @type problem entries:

D .mode duckbox
D select count(*) from sarif_results where codefi is null;
┌────────────────┐
│  count_star()  │
│     int64      │
├────────────────┤
│    4687456     │
│ (4.69 million) │
└────────────────┘

The type @path-problem entries:

D select count(*) from sarif_results where codefi = 0;
┌────────────────┐
│  count_star()  │
│     int64      │
├────────────────┤
│    1880268     │
│ (1.88 million) │
└────────────────┘