Report issues in JSON format about mariana-trench

[0xedward]

Hey @marcinguy, sorry I was just made aware of this open issue. SAPP supports outputting issues in json. You should be able to output the issues in json with the following command:

sapp --database-name sapp.db filter issues 1 ../../configuration/filters/ --output-format sapp

Why the tool is "Pysa" not "mariana-trench"? Little bit confused here

We currently only support outputting issues in SARIF for Pysa
https://github.com/facebook/sapp/blob/3eddd84c59bdd3032484efae6ea1174ffd798482/sapp/sarif.py#L54-L71

The reason you were able to get results in SARIF was because when any sapp commands are run without --tool=mariana-trench, sapp assumes the tool is Pysa. This can be very confusing for our users, so we've been working on storing the tool information in the database, so each sapp command will not require specifying the tool name after the initial sapp analyze run.

How do I make a filter to show all the 6 issues (in the app), always show all the issues in the sample-app-debug.apk or other apks?

You use the following SAPP filter (e.g. allow_all_issues.json) that allows all issues to passthrough:

{
    "name": "allow_all_issues",
    "description": "Filter that allows shows all issues",
    "paths": ["%"]
}

Then use that filter in the sapp filter command:

sapp --database-name sapp.db filter issues 1 allow_all_issues.json --output-format sapp

Let me know if that works for you! :)

[sinancepel]

Closing due to inactivity after @0xedward's answer - please feel free to re-open if you had another question!