Fix #14225 (addons; add optional "hash" attribute for warning messages)

[danmar]

No description provided.

[danmar]

@mario-campos I guess you might be interested in this PR. The Sarif output from Cppcheck will sometimes provide a partialFingerprints for warnings. It's rarelly provided today but I hope we can provide it more in the future.

Example:

{
  "$schema": "https:\/\/docs.oasis-open.org\/sarif\/sarif\/v2.1.0\/errata01\/os\/schemas\/sarif-schema-2.1.0.json",
  "runs": [
    {
      "results": [
        {
          "level": "error",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "test1.c"
                },
                "region": {
                  "endColumn": 14,
                  "endLine": 3,
                  "startColumn": 14,
                  "startLine": 3
                }
              }
            }
          ],
          "message": {
            "text": "Ensure that operations on signed integers do not result in overflow"
          },
          "partialFingerprints": {
            "hash": "11638054069549063377",
            "id": "premium-cert-int32-c"
          },
          "ruleId": "premium-cert-int32-c"
        }
      ],
      "tool": {
        "driver": {
          "informationUri": "https:\/\/cppcheck.sourceforge.io",
          "name": "Cppcheck",
          "rules": [
            {
              "defaultConfiguration": {
                "level": "error"
              },
              "fullDescription": {
                "text": ""
              },
              "help": {
                "text": ""
              },
              "id": "premium-cert-int32-c",
              "name": "",
              "properties": {
                "precision": "high",
                "problem.severity": "error"
              },
              "shortDescription": {
                "text": ""
              }
            }
          ],
          "semanticVersion": "2.19"
        }
      }
    }
  ],
  "version": "2.1.0"
}

[mario-campos]

Hey, @danmar. I provided some minor nitpicks, but I agree—it would be nice to see that SARIF output more complete. Nice job!

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud