Skip to content

Add PVS-Studio SARIF report support - #356

Open
TheLivan wants to merge 2 commits into
OWASP-Benchmark:mainfrom
TheLivan:feature/pvs-studio
Open

TheLivan wants to merge 2 commits into
OWASP-Benchmark:mainfrom
TheLivan:feature/pvs-studio

Conversation

@TheLivan

@TheLivan TheLivan commented Oct 14, 2026 •

Copy link
Copy Markdown
Contributor

Summary

Adds a reader for PVS-Studio SARIF reports.

  • New PVSStudioReader (extends SarifReader, commercial tool, CWE taken from rule tags)
  • Maps PVS-Studio-specific CWEs to Benchmark categories:
    • CWE-77, CWE-88 → Command Injection (78)
    • CWE-1240 → Weak Hash (328)
    • CWE-91 → XPath Injection (643)
  • Registered in Reader.allReaders()
  • Unit test + sample report Benchmark_PVS-Studio-7.42.sarif

@TheLivan

TheLivan commented Oct 14, 2026 •

Copy link
Copy Markdown
Contributor Author

P.S. The AI agent opened a PR by mistake. I meant to open it myself and only use the agent for review.

Anyway, it's ready.

@davewichers

Copy link
Copy Markdown
Contributor

@darkspirit510 - Can you get this tool and run a full scan on Benchmark with it and test the full results before merging this in?

@TheLivan

TheLivan commented Oct 14, 2026 •

Copy link
Copy Markdown
Contributor Author

@darkspirit510 If you need any help, feel free to reach out and I'll help you get it running. You can contact me at epifanov@viva64.com.

A free trial license can be requested on the PVS-Studio website.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants