Can anyone tell how primaryLocationLineHash be generated?

[Sharyie]

Discussed in #5982

^{Originally posted by ZH3FENG June 1, 2021}
I have read part of SARIF https://docs.oasis-open.org/sarif/sarif/v2.1.0/cs01/sarif-v2.1.0-cs01.html, particularly partialFingerprints property.
Also, SARIF results file from https://lgtm.com/help/lgtm/sarif-results-file.

This will contain, at a minimum, a value for the primaryLocationLineHash, which provides a fingerprint based on the context of the primary location.

Can anyone tell me how primaryLocationLineHash be generated. What algorithm ？
I have noticed the result contains codeflow property. Does codeflow affect generation of primaryLocationLineHash ?

I got the same confusion,could anyone tell some rough factors during primaryLocationLineHash been generated.

[aeisenberg]

Is this on LGTM or in code scanning using the GitHub CodeQL Action?

For LGTM, this value is generated based on the line and column offsets for each source element. So, the hashes are sensitive to the amount of text present in the different parts of the file.

For the CodeQL Action, the hashes are a bit more stable when changes happen in the file. The hashes are based on the contents of the line and some relative location in the file.

[github-actions]

This issue is stale because it has been open 14 days with no activity. Comment or remove the Stale label in order to avoid having this issue closed in 7 days.

[github-actions]

This issue was closed because it has been inactive for 7 days.