I’m looking for a way to integrate Clang Static Analyzer into my build process to wrap the project build and analyze it, capturing the analysis results in SARIF for further processing and integration with other tools.
Could someone provide guidance on how to achieve this? Specifically, how can I wrap the build process to incorporate Clang Static Analyzer and then obtain the results in SARIF format?
Any examples, suggestions, or references to relevant documentation would be greatly appreciated.
I also found the scan-build tool, but as I understand it, it does not support sarif output.
user24895454 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.