Sarif to BitBucket

A script to pipe sarif to BitBucket reports

Getting Started

Install:

npm i -g sarif-to-bb-token

BitBucket Configuration:

Create Repository Variables BB_TOKEN with api access or BB_USER and BB_APP_PASSWORD corresponding to a username / app password with BitBucket API access

Usage in BitBucket Pipeline

image: atlassian/default-image:3

pipelines:
  pull-requests:
    '**': # any source branch 
      - step:
          name: Run Sarif to BitBucket 
          script:
            - npm i -g sarif-to-bb-token
            - npm i -g snyk
            - snyk test --sarif | npx sarif-to-bb-token --token BB_TOKEN --repo $BITBUCKET_REPO_SLUG --commit $BITBUCKET_COMMIT --workspace $BITBUCKET_WORKSPACE
            - snyk code test --sarif | npx sarif-to-bb-token --token BB_TOKEN --repo $BITBUCKET_REPO_SLUG --commit $BITBUCKET_COMMIT --workspace $BITBUCKET_WORKSPACE

Sample Snyk Open Source Report

Sample Snyk Code Report