Tool integration

lintr Integration Guide

Static code analysis for R with SARIF output

Get a Free API Key

Integrate lintr with Vulnetix. Lint R source files for style, syntax, and potential bugs, then upload the SARIF report for tracking.

RCLI toolSARIF

Install & scan

$ # Install from CRAN inside R
install.packages("lintr")
$ Rscript -e "
library(lintr)
lints <- lint_dir('.')
sarif_output(lints, filename = 'lintr.sarif')
"

Run lintr in CI

Scan on every push and upload the results to Vulnetix:

- name: Set up R
  uses: r-lib/actions/setup-r@v2

- name: Install lintr
  run: Rscript -e "install.packages('lintr')"

- name: Run lintr
  run: |
    Rscript -e "
    library(lintr)
    lints <- lint_dir('.')
    sarif_output(lints, 'lintr.sarif')
    "

- name: Upload to Vulnetix
  run: vulnetix upload --file lintr.sarif

Centralise lintr results in Vulnetix

Upload lintr SARIF output to the Vulnetix platform to deduplicate findings, prioritise them with EPSS, CISA KEV and Coalition ESS exploit intelligence, and track remediation across every scanner in a single queue.

lintr documentation ↗  ·  Source repository ↗

Wire lintr into your CI/CD pipeline →