Add Support for SonarQube-Compatible SARIF Reports

[shlok-007]

I am interested in adding the option to generate SARIF reports compatible with sonarqube scanning.
Basically, the sonarqube scanner expects the following two additional fields/attributes:

• runs[].results[].ruleId
• runs[].tool.driver.rules (fields: id, name, shortDescription, fullDescription, defaultConfiguration).

Refer to SonarQube SARIF docs.

So, I am thinking of implementing as a simple opt in feature that can be accessed via a flag (say --sonarqube).

I would like to know the following:

• does such feature already exist in the tool?
• if not, I am interested in implementing it myself as it is a part of my B.Tech project. So, I would appreciate some guidance or pointers for the same.

Thanks,
Shlok