json-writer: print level key in SARIF output

... so that users can easily filter results according to their severity.

Fixes: #80

Co-authored-by: Kamil Dudka <[email protected]>
Co-authored-by: Lukáš Zaoral <[email protected]>

Author: lzaoral

src/json-writer.cc

@@ -214,6 +214,24 @@ static void sarifEncodeMsg(PTree *pDst, const std::string& text)
     pDst->put_child("message", msg);
 }
 
+static void sarifEncodeLevel(PTree *result, const std::string &event) {
+    std::string level = event;
+
+    // cut the [...] suffix from event if present
+    size_t pos = event.find('[');
+    if (std::string::npos != pos)
+        level = event.substr(0U, pos);
+
+    // go through events that denote warning level
+    for (const char *str : {"error", "warning", "note"}) {
+        if (str == level) {
+            // encode in the output if matched
+            result->put<std::string>("level", level);
+            return;
+        }
+    }
+}
+
 static void sarifEncodeLoc(PTree *pLoc, const Defect &def, unsigned idx)
 {
     // location ID within the result
@@ -291,6 +309,9 @@ void SarifTreeEncoder::appendDef(const Defect &def)
         // update CWE map
         cweMap_[ruleId] = def.cwe;
 
+    // key event severity level
+    sarifEncodeLevel(&result, keyEvt.event);
+
     // key event location
     PTree loc;
     sarifEncodeLoc(&loc, def, def.keyEventIdx);

tests/csgrep/80-sarif-writer-stdout.txt

@@ -13,6 +13,7 @@
             "results": [
                 {
                     "ruleId": "COMPILER_WARNING: warning",
+                    "level": "warning",
                     "locations": [
                         {
                             "id": 0,

tests/csgrep/90-sarif-writer-illegal-utf8-sequence-stdout.txt

@@ -0,0 +1 @@
+--mode sarif

tests/csgrep/96-sarif-levels-args.txt

@@ -139,3 +139,4 @@ test_csgrep("92-csgrep-tool-predicate"                )
 test_csgrep("93-csgrep-tool-predicate"                )
 test_csgrep("94-gcc-json"                             )
 test_csgrep("95-gcc-sarif"                            )
+test_csgrep("96-sarif-levels"                         )