{
"$schema": "https://json.schemastore.org/sarif-2.1.0.json",
"version": "2.1.0",
"runs": [
{
"tool": {
"driver": {
"name": "CodeQL",
"version": "2.17.0",
"rules": [
{
"id": "java/sql-injection",
"defaultConfiguration": {
"level": "error"
}
},
{
"id": "java/xss"
}
]
}
},
"results": [
{
"ruleIndex": 0,
"level": "error",
"message": {
"text": "Query built from user-controlled sources"
},
"locations": [
{
"physicalLocation": {
"artifactLocation": {
"uri": "file:///home/runner/work/repo/src/main/java/com/example/Dao.java"
},
"region": {
"startLine": 55,
"endLine": 58
}
}
}
],
"partialFingerprints": {
"primaryLocationLineHash": "1a2b3c4d5e6f7890"
}
},
{
"ruleIndex": 1,
"message": {
"text": "Cross-site scripting vulnerability"
},
"locations": [
{
"physicalLocation": {
"artifactLocation": {
"uri": "file:///home/runner/work/repo/src/main/java/com/example/Controller.java"
},
"region": {
"startLine": 30
}
}
}
],
"partialFingerprints": {
"primaryLocationLineHash": "aabbccddeeff0011"
}
}
]
}
]
}