Skip to content

v0.3.3 - GitHub Security Integration (SARIF)

Pre-release
Pre-release

Choose a tag to compare

@samuelmatzeit samuelmatzeit released this 26 Dec 22:28

🛡️ Enterprise Security Integration

  • GitHub Code Scanning Support (SARIF): Privalyse can now export findings in SARIF format (--format sarif). This allows you to view privacy leaks directly in the GitHub Security Tab of your repository.
  • Action Update: The GitHub Action now supports the format input to easily switch between Markdown reports and SARIF integration.

📦 Improvements

  • PyPI Compatibility: Fixed README rendering issues on PyPI by switching to pure Markdown and raw GitHub asset links.
  • Windows Support: Fixed encoding issues and path separator bugs in tests, ensuring smoother runs on Windows runners.

🚀 Quick Start for GitHub Security

- uses: privalyse/privalyse-cli@v0.3.3
  with:
    format: 'sarif'
    out: 'results.sarif'

- uses: github/codeql-action/upload-sarif@v2
  with:
    sarif_file: results.sarif