diff --git a/internal/snyk/sarif-code.json b/internal/snyk/sarif-code.json index 60faf48cf..298656a98 100644 --- a/internal/snyk/sarif-code.json +++ b/internal/snyk/sarif-code.json @@ -1,5 +1,5 @@ { - "$schema": "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json", + "$schema": "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/main/sarif-2.1/schema/sarif-schema-2.1.0.json", "version": "2.1.0", "runs": [ { diff --git a/internal/snyk/snyk.go b/internal/snyk/snyk.go index 52b68f791..d8be5937c 100644 --- a/internal/snyk/snyk.go +++ b/internal/snyk/snyk.go @@ -47,7 +47,7 @@ func ProcessSnykResultFile(file string) (*SnykData, error) { if err != nil { return nil, err } - if !strings.HasPrefix(report.Schema, "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-") && !strings.HasPrefix(report.Schema, "https://docs.oasis-open.org/sarif/sarif/v2.1.0/errata01/os/schemas/sarif-schema-2.1.0.json") { + if !strings.HasPrefix(report.Schema, "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/main/") && !strings.HasPrefix(report.Schema, "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-") && !strings.HasPrefix(report.Schema, "https://docs.oasis-open.org/sarif/sarif/v2.1.0/errata01/os/schemas/sarif-schema-2.1.0.json") { return nil, fmt.Errorf("invalid sarif file") } data := &SnykData{