SARIF, JSON, HTML, and terminal reports for code security review.

Radar emits compact terminal summaries and structured evidence for GitHub code scanning, CI artifacts, local review, and automation.

radar scan . --quick

Four outputs

Use terminal output for local work, SARIF scanner output for GitHub code scanning SARIF workflows, JSON security scan reports for automation, and HTML code security reports for review artifacts.

radar scan . --format html > radar.html
radar scan . --format sarif --fail-on high

Evidence to inspect

Use “SARIF, JSON, HTML, and terminal reports for code security review.” as the scope for this decision: verify the input, finding detail, workflow handoff, and product boundary before you install or buy.

CriterionEvidence to inspectBoundary
Input scopeSelected files, configuration, scan mode, and enabled rules.Only included paths and configured checks are evaluated.
Finding detailFile, line, rule ID, severity, explanation, and repair direction.Illustrative output is not a result from your repository.
Workflow handoffLocal result, report format, agent context, and optional CI signal.Enable exports or CI only when the workflow needs them.
Decision fitUse the same criteria on a real repository before choosing a plan or tool.No universal winner or guaranteed outcome is claimed.

Run this check locally

SARIF report generator

Radar is a SARIF report generator and code review report tool for third-party code scanning tool GitHub workflows that need the first lane to fix instead of unrelated alerts.

Validate the workflow on your own code.

Apply this page’s evidence to one real repository. For “SARIF, JSON, HTML, and terminal reports for code security review.”, confirm which finding is produced, whether the proposed next step is reproducible, and where local scanning, reports, agents, or CI should stop or expand.