This extension will take a Phylum project name (and optional group name), retrieve the JSON for the latest job and produce a valid SARIF output.
Clone the repository and install the extension via the Phylum CLI:
git clone https://github.com/phylum-dev/community-extensions
phylum extension install community-extensions/sarif/
To generate a SARIF file for a project, run:
phylum sarif --project <name>
Or optionally, if your project is in a group:
phylum sarif --project <name> --group <name>