TigahandGitHub d8ca2e96b1 fix(report): sort sarif driver rules and strip crlf from markdown headers (#337) ...

* fix(report): sort sarif driver rules for deterministic output

driver.rules was built by ranging a go map, so the emitted order
varied between runs over the same input, producing byte-unstable
sarif for identical scans. collect the rule ids into a slice and
sort them before building the rules list; ruleId still references
by id so no result is affected.

* fix(report): strip crlf from markdown target headers

target and module id are operator-supplied and were written verbatim
into "## " / "### " heading lines, so a target containing an
embedded newline followed by "## " text could inject a fake
standalone heading into the markdown report. sanitizeHeading
collapses cr/lf in both before they're written; the finding data
block itself was already unaffected.

2026-07-22 12:53:56 -07:00

..

markdown.go

fix(report): sort sarif driver rules and strip crlf from markdown headers (#337)

2026-07-22 12:53:56 -07:00

report_test.go

fix(report): sort sarif driver rules and strip crlf from markdown headers (#337)

2026-07-22 12:53:56 -07:00

report.go

fix(report): map sarif level to finding severity (#312)

2026-07-22 12:49:59 -07:00

sarif.go

fix(report): sort sarif driver rules and strip crlf from markdown headers (#337)

2026-07-22 12:53:56 -07:00