@eurekadevsecops/radar/src/util/sarif/transforms/escalate.js

Radar is an open-source orchestrator of security scanners.

module.exports = (sarif, escalations) => {
  // Treat warnings and notes as errors.
  for (const run of sarif.runs) {
    if (!run.results) continue
    for (const result of run.results) {
      if (escalations.includes(result.level)) {
        result.level = 'error'
        continue
      }

      if (Array.isArray(run?.tool?.driver?.rules)) {
        for (const rule of run.tool.driver.rules) {
          if (rule.id === result.ruleId) {
            if (escalations.includes(rule.defaultConfiguration?.level)) {
              rule.defaultConfiguration.level = 'error'
            }
            break
          }
        }
      }
    }
  }
  return sarif
}