fix(fs): assign the absolute path to be inspected to ROOTPATH when fi…

…lesystem (#5158)

pkg/report/sarif.go

@@ -4,6 +4,7 @@ import (
 	"fmt"
 	"html"
 	"io"
+	"path/filepath"
 	"regexp"
 	"strings"
 
@@ -46,6 +47,7 @@ type SarifWriter struct {
 	Version       string
 	run           *sarif.Run
 	locationCache map[string][]location
+	Target        string
 }
 
 type sarifData struct {
@@ -135,6 +137,10 @@ func (sw *SarifWriter) Write(report types.Report) error {
 			"repoDigests": report.Metadata.RepoDigests,
 		}
 	}
+	if sw.Target != "" {
+		absPath, _ := filepath.Abs(sw.Target)
+		rootPath = fmt.Sprintf("file://%s/", absPath)
+	}
 
 	ruleIndexes := map[string]int{}
 	for _, res := range report.Results {

pkg/report/writer.go

@@ -16,6 +16,8 @@ import (
 	"github.com/aquasecurity/trivy/pkg/report/spdx"
 	"github.com/aquasecurity/trivy/pkg/report/table"
 	"github.com/aquasecurity/trivy/pkg/types"
+
+	ftypes "github.com/aquasecurity/trivy/pkg/fanal/types"
 )
 
 const (
@@ -75,9 +77,14 @@ func Write(report types.Report, option flag.Options) error {
 			return xerrors.Errorf("failed to initialize template writer: %w", err)
 		}
 	case types.FormatSarif:
+		target := ""
+		if report.ArtifactType == ftypes.ArtifactFilesystem {
+			target = option.Target
+		}
 		writer = &SarifWriter{
 			Output:  output,
 			Version: option.AppVersion,
+			Target:  target,
 		}
 	case types.FormatCosignVuln:
 		writer = predicate.NewVulnWriter(output, option.AppVersion)