How do you use SARIF today?

Clean Code Discussions
1

Hello,

Your insights and experiences are vital to us. We’re excited to announce that we’re working on enhancing the SARIF feature of SonarQube, and we’d love to hear your thoughts on it.

By participating in our brief survey, you’ll have the opportunity to directly influence the development of this feature. Your feedback will help us understand how you’re currently using SARIF and how we can improve it to better meet your needs.

Please click on the link below to begin the survey. It should only take a few minutes to complete.

=> [THE SURVEY]

Your contribution will play a significant role in shaping the future of SonarQube. We greatly appreciate your time and effort in helping us make our product even better.

Alex

2

I think you are missing something with your survey - as soon as someone answers “no” to are they using your SARIF import, that’s the end of the survey.
It may be that people are not using it because it is not suitable - so if you want to improve the feature you may wish to ask people why they are NOT using it if the tooling they use supports it.

We have cases currently where we convert data to your generic issue format rather than using either native Sonar support or SARIF support for same.
There is no way to convey this with your survey as it stands

3

Thanks for the feedback. The survey was adjusted, and you can now tell us why you can’t use the SARIF format.