korext 0.9.3 → 0.9.4

package/bin/korext.js

@@ -172,8 +172,11 @@ program
   .action((tokenArg) => {
     let token = tokenArg;
     if (!token) {
-      console.log(`\nPlease generate an API token at ${chalk.cyan('https://app.korext.com/settings/tokens')}`);
-      console.log(`Then run: ${chalk.green('korext login <your-token>')}\n`);
+      console.log(`\nTo authenticate, sign in at ${chalk.cyan('https://app.korext.com')} and use your session token.`);
+      console.log(`Long-lived API tokens for CI/CD are coming soon.`);
+      console.log(`\nFor CI/CD, Korext works in anonymous mode (20 requests per hour).`);
+      console.log(`Set ${chalk.green('KOREXT_API_TOKEN')} for higher limits.`);
+      console.log(`\nThen run: ${chalk.green('korext login <your-token>')}\n`);
       process.exit(1);
     }
     const config = getConfig();
@@ -331,9 +334,12 @@ program
 
     let usedLocalEngine = false;
 
+    const resolvedDir = path.resolve(dir);
+
     for (let i = 0; i < files.length; i++) {
       const file = files[i];
       const displayPath = path.relative(process.cwd(), file);
+      const sarifPath = path.relative(resolvedDir, file);
       
       let fileSpinner = null;
       if (isText) fileSpinner = ora(`Analyzing ${displayPath} (${i + 1}/${files.length})...`).start();
@@ -433,39 +439,51 @@ program
           }
           storedV.push(v);
         }
-        report.results.push({ file: displayPath, violations: storedV });
+        report.results.push({ file: displayPath, sarifFile: sarifPath, violations: storedV });
       } else {
         if (fileSpinner) fileSpinner.stop();
-        report.results.push({ file: displayPath, violations: [] });
+        report.results.push({ file: displayPath, sarifFile: sarifPath, violations: [] });
       }
     }
 
     if (format === 'json') {
       console.log(JSON.stringify(report, null, 2));
     } else if (format === 'sarif') {
-      const sarif = {
-        version: "2.1.0",
-        $schema: "https://docs.oasis-open.org/sarif/sarif/v2.1.0/errata01/os/schemas/sarif-schema-2.1.0.json",
-        runs: [{
-          tool: { driver: { name: "Korext", version } },
-          results: []
-        }]
-      };
+      // Build SARIF results
+      const sarifResults = [];
       for (const res of report.results) {
         for (const v of res.violations) {
-          sarif.runs[0].results.push({
-            ruleId: v.ruleName,
+          const messageText = v.explanation
+            || (v.ruleName ? v.ruleName + ': ' + (v.message || 'violation detected') : (v.ruleId || 'unknown') + ' violation detected');
+          sarifResults.push({
+            ruleId: v.ruleName || v.ruleId || 'unknown',
             level: v.severity === 'critical' || v.severity === 'high' ? "error" : v.severity === 'medium' ? "warning" : "note",
-            message: { text: v.explanation },
+            message: { text: messageText },
             locations: [{
               physicalLocation: {
-                artifactLocation: { uri: res.file },
+                artifactLocation: { uri: res.sarifFile || res.file },
                 region: { startLine: v.line, startColumn: v.column || 1 }
               }
             }]
           });
         }
       }
+
+      // Build driver.rules from unique ruleIds
+      const ruleIds = [...new Set(sarifResults.map(r => r.ruleId))];
+      const rules = ruleIds.map(id => ({
+        id,
+        shortDescription: { text: id.replace(/-/g, ' ') }
+      }));
+
+      const sarif = {
+        version: "2.1.0",
+        $schema: "https://docs.oasis-open.org/sarif/sarif/v2.1.0/errata01/os/schemas/sarif-schema-2.1.0.json",
+        runs: [{
+          tool: { driver: { name: "Korext", version, rules } },
+          results: sarifResults
+        }]
+      };
       console.log(JSON.stringify(sarif, null, 2));
     } else {
       console.log('\n' + chalk.dim('======================================='));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "korext",
-  "version": "0.9.3",
+  "version": "0.9.4",
   "description": "Korext Command Line Interface",
   "type": "module",
   "main": "bin/korext.js",