[{"_1":2,"_155":-5,"_156":-5},"loaderData",{"_3":4,"_13":14,"_21":22,"_134":135},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","routes/_layout",{"_15":-5,"_16":17,"_18":17,"_19":11,"_20":11},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_23":24,"_25":-5,"_26":11,"_27":11,"_28":29,"_30":31,"_32":-5,"_33":11,"_34":35,"_84":-5,"_85":86,"_125":-5,"_126":11,"_127":17,"_128":11,"_129":-5,"_130":11,"_131":-5,"_132":133},"canonicalUrl","https://hub.docker.com/r/tomasbjerre/violation-comments-to-github-command-line/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","tomasbjerre","reponame","violation-comments-to-github-command-line","cloudBuildSource","isAutobuildsAvailable","repo",{"_36":37,"_38":39,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":51,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":70,"_75":11,"_76":77,"_81":29,"_82":83},"categories",[],"content_types",[40],"image","date_registered","2026-09-19T15:33:25.682788Z","description","Report static code analysis to GitHub.","is_private","last_updated","2026-09-19T15:33:25.814805Z","last_modified","2026-09-19T15:33:27.57042Z","media_types",[52],"application/vnd.docker.container.image.v1+json","name","pull_count",39,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","# Violation Comments To GitHub Command Line\n\n[![NPM](https://img.shields.io/npm/v/violation-comments-to-github-command-line.svg?style=flat-square)](https://www.npmjs.com/package/violation-comments-to-github-command-line)\n[![Maven Central](https://img.shields.io/maven-central/v/se.bjurr.violations/violation-comments-to-github-command-line.svg?label=Maven%20Central)](https://central.sonatype.com/artifact/se.bjurr.violations/violation-comments-to-github-command-line)\n[![NPM Downloads](https://img.shields.io/npm/dm/violation-comments-to-github-command-line.svg?style=flat)](https://www.npmjs.com/package/violation-comments-to-github-command-line)\n[![Docker Pulls](https://badgen.net/docker/pulls/tomasbjerre/violation-comments-to-github-command-line?icon=docker&label=pulls)](https://hub.docker.com/r/tomasbjerre/violation-comments-to-github-command-line/)\n\nReport static code analysis to GitHub. It uses the [Violations Lib](https://github.com/tomasbjerre/violations-lib).\n\n![GitHub Comment](/github-comment.png)\n\n| Version | Java Version |\n| ------------------| ------------ |\n| version < 1.26.0 | 11 |\n| 1.26.0 <= version | 17 |\n\n- The runnable `jar` can be found in [Maven Central](http://search.maven.org/#search%7Cga%7C1%7Ca%3A%22violation-comments-to-github-command-line%22) and used like `java -jar violation-comments-to-github-command-line-*.jar ....`.\n- The runnable can be found in [NPM](https://www.npmjs.com/package/violation-comments-to-github-command-line).\n- The `Docker` image can be found in [Dockerhub](https://hub.docker.com/r/tomasbjerre/violation-comments-to-github-command-line) and used like `docker run --mount src=\"$(pwd)\",target=/usr/src/violation-comments-to-github-command-line,type=bind tomasbjerre/violation-comments-to-github-command-line:X`.\n\nRun it with:\n\n```shell\nnpx violation-comments-to-github-command-line \\\n -ot TOKENHERE \\\n -ro tomasbjerre \\\n -rn violations-test \\\n -prid 3 \\\n -v \"CHECKSTYLE\" \".\" \".*checkstyle/main\\.xml$\" \"Checkstyle\" \\\n -v \"JSHINT\" \".\" \".*jshint/report\\.xml$\" \"JSHint\"\n```\n\nYou may also want to explore Sarif as an alternative to this, se README.md in [violation-comments-to-github-lib](https://github.com/tomasbjerre/violation-comments-to-github-lib).\n\n**You must perform the merge before build**. If you don't perform the merge, the reported violations will refer to other lines then those in the pull request. The merge can be done with a shell script like this.\n\n```\necho ---\necho --- Merging from $FROM in $FROMREPO to $TO in $TOREPO\necho ---\ngit clone $TOREPO\ncd *\ngit reset --hard $TO\ngit status\ngit remote add from $FROMREPO\ngit fetch from\ngit merge $FROM\ngit --no-pager log --max-count=10 --graph --abbrev-commit\n\nYour build command here!\n```\n\nExample of supported reports are available [here](https://github.com/tomasbjerre/violations-lib/tree/master/src/test/resources).\n\nA number of **parsers** have been implemented. Some **parsers** can parse output from several **reporters**.\n\n| Reporter | Parser | Notes\n| --- | --- | ---\n| [_ARM-GCC_](https://developer.arm.com/open-source/gnu-toolchain/gnu-rm) | `CLANG` | \n| [_AndroidLint_](http://developer.android.com/tools/help/lint.html) | `ANDROIDLINT` | \n| [_Ansible-Later_](https://github.com/thegeeklab/ansible-later) | `ANSIBLELATER` | With `json` format\n| [_AnsibleLint_](https://github.com/willthames/ansible-lint) | `FLAKE8` | With `-p`\n| [_Bandit_](https://github.com/PyCQA/bandit) | `CLANG` | With `bandit -r examples/ -f custom -o bandit.out --msg-template \"{abspath}:{line}: {severity}: {test_id}: {msg}\"`\n| [_CLang_](https://clang-analyzer.llvm.org/) | `CLANG` | \n| [_CPD_](http://pmd.sourceforge.net/pmd-4.3.0/cpd.html) | `CPD` | \n| [_CPPCheck_](http://cppcheck.sourceforge.net/) | `CPPCHECK` | With `cppcheck test.cpp --output-file=cppcheck.xml --xml`\n| [_CPPLint_](https://github.com/theandrewdavis/cpplint) | `CPPLINT` | \n| [_CSSLint_](https://github.com/CSSLint/csslint) | `CSSLINT` | \n| [_Checkstyle_](http://checkstyle.sourceforge.net/) | `CHECKSTYLE` | \n| [_CloudFormation Linter_](https://github.com/aws-cloudformation/cfn-lint) | `JUNIT` | `cfn-lint . -f junit --output-file report-junit.xml`\n| [_CodeClimate_](https://codeclimate.com/) | `CODECLIMATE` | \n| [_CodeNarc_](http://codenarc.sourceforge.net/) | `CODENARC` | \n| [_Coverity_](https://scan.coverity.com/) | `COVERITY` | \n| [_Dart_](https://dart.dev/) | `MACHINE` | With `dart analyze --format=machine`\n| [_Dependency Check_](https://jeremylong.github.io/DependencyCheck/) | `SARIF` | Using `--format SARIF`\n| [_Detekt_](https://github.com/arturbosch/detekt) | `CHECKSTYLE` | With `--output-format xml`.\n| [_DocFX_](http://dotnet.github.io/docfx/) | `DOCFX` | \n| [_Doxygen_](https://www.stack.nl/~dimitri/doxygen/) | `CLANG` | \n| [_ERB_](https://www.puppetcookbook.com/posts/erb-template-validation.html) | `CLANG` | With `erb -P -x -T '-' \"${it}\" \\| ruby -c 2>&1 >/dev/null \\| grep '^-' \\| sed -E 's/^-([a-zA-Z0-9:]+)/${filename}\\1 ERROR:/p' > erbfiles.out`.\n| [_ESLint_](https://github.com/sindresorhus/grunt-eslint) | `CHECKSTYLE` | With `format: 'checkstyle'`.\n| [_Findbugs_](http://findbugs.sourceforge.net/) | `FINDBUGS` | \n| [_Flake8_](http://flake8.readthedocs.org/en/latest/) | `FLAKE8` | \n| [_FxCop_](https://en.wikipedia.org/wiki/FxCop) | `FXCOP` | \n| [_GCC_](https://gcc.gnu.org/) | `CLANG` | \n| [_GHS_](https://www.ghs.com/) | `GHS` | \n| [_Gendarme_](http://www.mono-project.com/docs/tools+libraries/tools/gendarme/) | `GENDARME` | \n| [_Generic reporter_]() | `GENERIC` | Will create one single violation with all the content as message.\n| [_GoLint_](https://github.com/golang/lint) | `GOLINT` | \n| [_GoVet_](https://golang.org/cmd/vet/) | `GOLINT` | Same format as GoLint.\n| [_GolangCI-Lint_](https://github.com/golangci/golangci-lint/) | `CHECKSTYLE` | With `--out-format=checkstyle`.\n| [_HadoLint_](https://github.com/hadolint/hadolint/) | `CHECKSTYLE` | With `-f checkstyle`\n| [_IAR_](https://www.iar.com/iar-embedded-workbench/) | `IAR` | With `--no_wrap_diagnostics`\n| [_Infer_](http://fbinfer.com/) | `PMD` | Facebook Infer. With `--pmd-xml`.\n| [_JACOCO_](https://www.jacoco.org/) | `JACOCO` | \n| [_JCReport_](https://github.com/jCoderZ/fawkez/wiki/JcReport) | `JCREPORT` | \n| [_JSHint_](http://jshint.com/) | `JSLINT` | With `--reporter=jslint` or the CHECKSTYLE parser with `--reporter=checkstyle`\n| [_JUnit_](https://junit.org/junit4/) | `JUNIT` | It only contains the failures.\n| [_KTLint_](https://github.com/shyiko/ktlint) | `CHECKSTYLE` | \n| [_Klocwork_](http://www.klocwork.com/products-services/klocwork/static-code-analysis) | `KLOCWORK` | \n| [_KotlinGradle_](https://github.com/JetBrains/kotlin) | `KOTLINGRADLE` | Output from Kotlin Gradle Plugin.\n| [_KotlinMaven_](https://github.com/JetBrains/kotlin) | `KOTLINMAVEN` | Output from Kotlin Maven Plugin.\n| [_Lint_]() | `LINT` | A common XML format, used by different linters.\n| [_MSBuildLog_](https://docs.microsoft.com/en-us/visualstudio/msbuild/obtaining-build-logs-with-msbuild?view=vs-2019) | `MSBULDLOG` | With `-fileLogger` use `.*msbuild\\\\.log$` as pattern or `-fl -flp:logfile=MyProjectOutput.log;verbosity=diagnostic` for a custom output filename\n| [_MSCpp_](https://visualstudio.microsoft.com/vs/features/cplusplus/) | `MSCPP` | \n| [_Mccabe_](https://pypi.python.org/pypi/mccabe) | `FLAKE8` | \n| [_MyPy_](https://pypi.python.org/pypi/mypy-lang) | `MYPY` | \n| [_PCLint_](http://www.gimpel.com/html/pcl.htm) | `PCLINT` | PC-Lint using the same output format as the Jenkins warnings plugin, [_details here_](https://wiki.jenkins.io/display/JENKINS/PcLint+options)\n| [_PHPCS_](https://github.com/PHPCSStandards/PHP_CodeSniffer) | `CHECKSTYLE` | With `phpcs api.php --report=checkstyle`.\n| [_PHPPMD_](https://phpmd.org/) | `PMD` | With `phpmd api.php xml ruleset.xml`.\n| [_PMD_](https://pmd.github.io/) | `PMD` | \n| [_Pep8_](https://github.com/PyCQA/pycodestyle) | `FLAKE8` | \n| [_PerlCritic_](https://github.com/Perl-Critic) | `PERLCRITIC` | \n| [_PiTest_](http://pitest.org/) | `PITEST` | \n| [_ProtoLint_](https://github.com/yoheimuta/protolint) | `PROTOLINT` | \n| [_Puppet-Lint_](http://puppet-lint.com/) | `CLANG` | With `-log-format %{fullpath}:%{line}:%{column}: %{kind}: %{message}`\n| [_PyDocStyle_](https://pypi.python.org/pypi/pydocstyle) | `PYDOCSTYLE` | \n| [_PyFlakes_](https://pypi.python.org/pypi/pyflakes) | `FLAKE8` | \n| [_PyLint_](https://www.pylint.org/) | `PYLINT` | With `pylint --output-format=parseable`.\n| [_ReSharper_](https://www.jetbrains.com/resharper/) | `RESHARPER` | \n| [_RubyCop_](http://rubocop.readthedocs.io/en/latest/formatters/) | `CLANG` | With `rubycop -f clang file.rb`\n| [_SARIF_](https://github.com/oasis-tcs/sarif-spec) | `SARIF` | v2.x. Microsoft Visual C# can generate it with `ErrorLog=\"BuildErrors.sarif,version=2\"`.\n| [_SbtScalac_](http://www.scala-sbt.org/) | `SBTSCALAC` | \n| [_Scalastyle_](http://www.scalastyle.org/) | `CHECKSTYLE` | \n| [_Semgrep_](https://semgrep.dev/) | `SEMGREP` | With `--json`.\n| [_Simian_](http://www.harukizaemon.com/simian/) | `SIMIAN` | \n| [_Sonar_](https://www.sonarqube.org/) | `SONAR` | With `mvn sonar:sonar -Dsonar.analysis.mode=preview -Dsonar.report.export.path=sonar-report.json`. Removed in 7.7, see [SONAR-11670](https://jira.sonarsource.com/browse/SONAR-11670) but can be retrieved with: `curl --silent 'http://sonar-server/api/issues/search?componentKeys=unique-key&resolved=false' \\| jq -f sonar-report-builder.jq > sonar-report.json`.\n| [_Spotbugs_](https://spotbugs.github.io/) | `FINDBUGS` | \n| [_StyleCop_](https://stylecop.codeplex.com/) | `STYLECOP` | \n| [_SwiftLint_](https://github.com/realm/SwiftLint) | `CHECKSTYLE` | With `--reporter checkstyle`.\n| [_TSLint_](https://palantir.github.io/tslint/usage/cli/) | `CHECKSTYLE` | With `-t checkstyle`\n| [_Valgrind_](https://valgrind.org/) | `VALGRIND` | With `--xml=yes`.\n| [_XMLLint_](http://xmlsoft.org/xmllint.html) | `XMLLINT` | \n| [_XUnit_](https://xunit.net/) | `XUNIT` | It only contains the failures.\n| [_YAMLLint_](https://yamllint.readthedocs.io/en/stable/index.html) | `YAMLLINT` | With `-f parsable`\n| [_ZPTLint_](https://pypi.python.org/pypi/zptlint) | `ZPTLINT` |\n\n51 parsers and 77 reporters.\n\nMissing a format? Open an issue [here](https://github.com/tomasbjerre/violations-lib/issues)!\n\n# Usage\n\n```shell\nUsage: violation-comments-to-github-command-line [-h] [-show-debug-info]\n [-ccwasfc=]\n [-cocc=] [-cocf=]\n [-comment-template=] [-csfc=]\n [-ghu=] [-keep-old-comments=]\n [-max=] [-ot=] [-p=]\n -prid= -rn= -ro=\n [-s=] [-u=] [-urc=]\n [-v= ]...\n -ccwasfc, -create-comment-with-all-single-file-comments=\n\n -cocc, -comment-only-changed-content=\n\n -cocf, -comment-only-changed-files=\n True if only changed files should be commented.\n False if all findings should be commented.\n -comment-template=\n See https://github.\n com/tomasbjerre/violation-comments-lib\n -csfc, -create-single-file-comments=\n\n -ghu, -github-url=\n\n -h, --help Show this help message and exit.\n -keep-old-comments=\n\n -max, -max-number-of-violations=\n\n -ot, -oauth2-token=\n\n -p, -password=\n -prid, -pull-request-id=\n\n -rn, -repository-name=\n Example: 'violations-test'\n -ro, -repository-owner=\n Example: 'tomasbjerre'\n -s, -severity=\n Minimum severity level to report.\n -show-debug-info Please run your command with this parameter and\n supply output when reporting bugs.\n -u, -username=\n -urc, -use-review-comments=\n True if single file comments should be batched\n into one pull request review instead of one HTTP\n request per comment. GitHub applies this\n atomically: if any comment in the batch has an\n invalid diff position, none of them are created.\n -v, --violations= \n The violations to look for. \n where PARSER is one of\n the values of se.bjurr.violations.lib.reports.\n Parser (see supported formats table in README\n for the full list).\n Example: -v \"JSHINT\" \".\" \".*/jshint.xml$\" \"JSHint\"\n```\n\nCheckout the [Violations Lib](https://github.com/tomasbjerre/violations-lib) for more documentation.\n","has_starred","hub_user","immutable_tags_settings",{"_71":11,"_72":73},"enabled","rules",[74],".*","is_automated","permissions",{"_78":17,"_79":11,"_80":11},"read","write","admin","user","storage_size",81434291,"orgData","recentTags",[87],{"_88":40,"_89":90,"_91":92,"_93":94,"_95":96,"_97":98,"_46":114,"_115":90,"_116":29,"_117":52,"_53":118,"_119":120,"_121":105,"_122":114,"_123":62,"_124":17},"content_type","creator",22393115,"digest","sha256:3054d311385e22f7d9a70ca4a445bdc10b2d60bfb742eb41a137ab0a2b9dd71f","full_size",81426721,"id",1316296025,"images",[99],{"_100":101,"_91":92,"_102":103,"_104":105,"_106":107,"_108":109,"_110":103,"_111":-5,"_112":94,"_59":62,"_113":-5},"architecture","amd64","features","","last_pulled","2026-09-22T21:13:48.734131692Z","last_pushed","2026-09-19T15:33:25.399372279Z","os","linux","os_features","os_version","size","variant","2026-09-19T15:33:25.665226Z","last_updater","last_updater_username","media_type","1.26.0","repository",32540569,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"routes/_layout.r.$namespace.$reponame.tags",{"_34":136,"_143":144,"_132":153,"_154":11},{"_36":137,"_38":138,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":139,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":140,"_75":11,"_76":142,"_81":29,"_82":83},[],[40],[52],{"_71":11,"_72":141},[74],{"_78":17,"_79":11,"_80":11},"tags",{"_145":60,"_146":-5,"_147":-5,"_148":149},"count","next","previous","results",[150],{"_88":40,"_89":90,"_91":92,"_93":94,"_95":96,"_97":151,"_46":114,"_115":90,"_116":29,"_117":52,"_53":118,"_119":120,"_121":105,"_122":114,"_123":62,"_124":17},[152],{"_100":101,"_91":92,"_102":103,"_104":105,"_106":107,"_108":109,"_110":103,"_111":-5,"_112":94,"_59":62,"_113":-5},[],"canDeleteTags","actionData","errors"]

tomasbjerre/violation-comments-to-github-command-line

Tags for tomasbjerre/violation-comments-to-github-command-line