- Issue created by @royalpinto007
- 🇺🇸United States Stanzin
@royal while it is true that SARIF provides a standardized way to report static analysis findings, its integration into Drupal’s ecosystem seems unnecessary. why because drupal’s CI pipeline already leverages well-established tools like PHPStan, PHPCS, and PHPUnit, which produce detailed reports in widely supported formats such as JSON, XML, and plain text. while These formats are compatible with existing CI environments like DrupalCI, GitHub Actions, and GitLab CI, eliminating the need for SARIF.
Let me know your thought process, I might be wrong )