cx-sarif-to-junit

Convert Checkmarx One SARIF security reports into rich JUnit XML test reports optimized for AWS CodeBuild.

Features

• Rich Vulnerability Cards: Formats findings with severity, rule details, line/column, code snippet, description, and remediation guidance.
• Zero Runtime Dependencies: Built with native Node.js APIs.
• AWS CodeBuild Compatible: Generates compliant JUnit XML with readable testcase names and detailed failure output.
• CLI & Module Support: Run via CLI or import as a library.

Installation

# Run directly with npx
npx cx-sarif-to-junit -i cx_report.sarif -o cx_report_junit.xml

# Or install globally
npm install -g cx-sarif-to-junit

CLI Usage

cx-sarif-to-junit -i <input.sarif> -o <output.xml> [-s <suite-name>]

| Option | Description | Default | |---|---|---| | -i, --input | Path to SARIF file | 'cx_report.sarif' | | -o, --output | Path for JUnit XML | 'cx_report.xml' | | -s, --suite-name | Custom JUnit test suite name | Checkmarx One Scan Results | | -h, --help | Display usage instructions | |

Programmatic Usage

const { sarifToJunit } = require("cx-sarif-to-junit");

const sarifData = JSON.parse(fs.readFileSync("cx_report.sarif", "utf8"));
const junitXml = sarifToJunit(sarifData, { suiteName: "Security Scan" });

License

MIT