Configuring Sigma Output

Sigma Documentation
Version
latest

Sigma output includes information about the found issues, their severity, and remediation advice. Output can be shown as standard output in the console or in the CI/CD UI after Sigma executes.

By default, results are placed in a file named sigma-results.json in the current working directory.

  • Use the -f option of the sigma analyze command to change the format of the output file.

    Output is formatted as one of JSON or SARIF formats.

    You can select the COVERITY output format when running Sigma with Coverity Connect. For more information, see cov-import-sigma.

  • Use the -o option of the sigma analyze command to change the location of the results file.

In addition:

  • If you are using Sigma as a quality gate, additional info about the policy that was violated and the associated issue will also be displayed in the console.