SARIF output

This article was moved to "CodeQL CLI SARIF output" on the GitHub Docs site as of January 2023.

• SARIF specification and schema

• Change notes

  • Changes between versions
  • Future changes to the output

• Generated SARIF objects

  • sarifLog object
  • run object
  • tool object
  • toolComponent object
  • reportingDescriptor object for rule
  • artifact object
  • artifactLocation object
  • result object
  • location object
  • physicalLocation object
  • region object
  • codeFlow object
  • threadFlow object
  • threadFlowLocation object