Add CWE info in the SARIF output (#322)

Signed-off-by: Eric Brown <eric.brown@securesauce.dev>
securesauce · Mar 5, 2024 · cc4e560 · cc4e560
1 parent 83996e3
commit cc4e560
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/precli/renderers/json.py b/precli/renderers/json.py
@@ -68,7 +68,10 @@ def create_rule_array(self, run: Run):
                     )
                 },
                 properties={
-                    "tags": ["security"],
+                    "tags": [
+                        "security",
+                        f"external/cwe/cwe-{rule.cwe.cwe_id}",
+                    ],
                 },
             )
             rules.append(reporting_descriptor)