The JSON output does not include the full report but only the very short summary with a reference to the full report. This is not enough for CI systems. CI systems should be able to store the full result as part of their build artifacts as long as their policies requires them. The current report requires a second retrieval.
Instead of the current JSON output produce the full report on SARIF format. This also has the added benefit that it allows the tool to be integrated easier with git providers like GitHub or vscode
There are libraries like go-sarif that can help with the implementation of it.
The JSON output does not include the full report but only the very short summary with a reference to the full report. This is not enough for CI systems. CI systems should be able to store the full result as part of their build artifacts as long as their policies requires them. The current report requires a second retrieval.
Instead of the current JSON output produce the full report on SARIF format. This also has the added benefit that it allows the tool to be integrated easier with git providers like GitHub or vscode
There are libraries like go-sarif that can help with the implementation of it.