Import one or more SARIF 2.1.0 files and evaluate their findings through the Fendix decision pipeline.
Stable in v3.7.0
Syntax
terminal
fendix import <sarif-file> [<sarif-file>...] [flags]Arguments and required inputs
Provide one or more SARIF paths; use - to read from stdin.
Examples
Import SARIF
terminal
fendix import semgrep.sarif --format json --output imported.jsonOptions
Scroll the table horizontally to inspect every column.
| Option | Type | Default | Requirement | Configuration | Environment | Description |
|---|---|---|---|---|---|---|
--baseline | string | — | Optional | — | — | Path to a baseline (from --save-baseline) or JSON report; only occurrences not proven present in it are reported |
--deescalate-tests | bool | true | Optional | scan.deescalate_tests | — | Report findings in test/fixture code as INFO instead of WARN (evidence is preserved, never suppressed). Pass --deescalate-tests=false to treat test-code findings like production ones. |
--enforce-confidence | bool | true | Optional | scan.enforce_confidence | — | Only BLOCK a finding at or above --fail-on when its confidence band and evidence support it: LOW warns; MEDIUM needs an independent signal; HIGH needs an independent or self-evident signal. Pass --enforce-confidence=false to restore the legacy severity-only gate — findings that block only because of that relaxation are marked policy_override in the report. |
--fail-on | string | — | Optional | fail_on | — | Exit 1 if a finding at this severity reaches BLOCK: CRITICAL, HIGH, MEDIUM, LOW (confidence gating applies — see --enforce-confidence)CRITICAL · HIGH · MEDIUM · LOW |
-f, --format | string | json | Optional | scan.format | — | Output format: json, html, sarif, pdfjson · html · sarif · pdf |
--ignore | string | — | Optional | ignore_path | — | Path to .fendix-ignore file |
--lang | string | en | Optional | — | — | HTML report language: en (default), ar (Arabic, RTL). Other formats stay English.en · ar |
-o, --output | string | — | Optional | — | — | Output file path (default: stdout) |
--save-baseline | string | — | Optional | — | — | Save current findings, with every occurrence identity, to this path (baseline format v2) |
--target | string | — | Optional | — | — | Optional label stamped into report metadata (an import has no scanned target of its own) |