ReferenceStablev3.7.0

SARIF

SARIF 2.1.0 export and import directions and their trust boundary.

On this page

Fendix exports and imports SARIF 2.1.0. These are different directions with different trust and mapping rules.

Two directions

Export SARIF

Map Fendix rules, findings, decisions, evidence, coverage, and stable fingerprints into SARIF 2.1.0.

Import SARIF

Normalize external-tool results as imported evidence without claiming Fendix executed the source analyzer.

Interchange boundary

SARIF does not have native equivalents for every Fendix concept. Fendix uses standard SARIF fields where semantics align and namespaced properties for coverage, release decisions, and detailed evidence.