Import of message from SARIF stack

  • SonarQube Developer Edition 10.8
  • how is SonarQube deployed: zip
  • Import SARIF stacks with messages per stack

The SARIF importer already supports the import of Stacks according to Static Analysis Results Interchange Format (SARIF) Version 2.1.0 Plus Errata 01.
Beside the frames that are already imported as flow into SonarQube, SARIF also supports a message per stack. But this message is currently ignored.

The addFlow method of AbstractDefaultIssue.java already accepts a flowDescription argument.

Unfortunately this method overload is not exposed in the plugin API.

Please consider exposing this argument in the pluginApi and the import of the stack message.

Example for SARIF file with stack with a message: