Skip to content

NodeJSScan report in SARIF

I would like to import NodeJSScan report into DefectDojo SARIF parser, whereas NodeJSScan report is currently generated in text format. This import into DefectDojo is automated through a template I developped. Overwriting NODEJSSCAN_ARGS works fine for testing, but I cannot ask all projects using my template to do so. Therefore it would be nice to get the report also in SARIF, by default, not only in text format.