[code-quality] Pylint and SARIF

2018-09-03 Thread Paul Anderson
Hello everyone! This is my first post to this list, so first, let me give a quick introduction. I'm VP of Engineering at GrammaTech, where I am in charge of an advanced static analysis tool named CodeSonar. It primarily works for C and C++, but also for x86, x64 and ARM binaries. We cover othe

Re: [code-quality] Pylint and SARIF

2018-09-03 Thread Claudiu Popa
Hi Paul, Nice to meet you. Thank you for that link, I wasn't aware of this new standard. It would be great to support it for pylint as well, and most likely shouldn't be too difficult to add a custom reporter in the same vein as the JSON reporter. You can find some examples here: https://github.co

Re: [code-quality] Pylint and SARIF

2018-09-03 Thread Ian Stapleton Cordasco
I think Bandit (https://github.com/pycqa/bandit) is another project we should add this to, as well as Flake8 On Mon, Sep 3, 2018 at 10:25 AM Claudiu Popa wrote: > > Hi Paul, > > Nice to meet you. > Thank you for that link, I wasn't aware of this new standard. > It would be great to support it for

Re: [code-quality] Pylint and SARIF

2018-09-03 Thread Paul Anderson
Claudiu: On 9/3/2018 11:25 AM, Claudiu Popa wrote: Hi Paul, Nice to meet you. Thank you for that link, I wasn't aware of this new standard. It would be great to support it for pylint as well, and most likely shouldn't be too difficult to add a custom reporter in the same vein as the JSON repor

Re: [code-quality] Pylint and SARIF

2018-09-03 Thread Paul Anderson
Ian: I'll take a look at those too, but I can't promise I'll have the bandwidth for them. -Paul On 9/3/2018 12:47 PM, Ian Stapleton Cordasco wrote: I think Bandit (https://github.com/pycqa/bandit) is another project we should add this to, as well as Flake8 On Mon, Sep 3, 2018 at 10:25 AM Cl