Malformed output after a parsing error

[VeraBE]

• terrascan version: I tried 1.14.0 and 1.15.2, both have the issue
• Operating System: Windows 11

Description

When analyzing a template with a syntax issue the tool outputs an error on top of the SARIF file instead of using the toolNotifications object, resulting in a malformed JSON file

The templated had this object:

"DBSecurityGroup": {
      "Type": "AWS::RDS::DBSecurityGroup",
      "Condition" : "Is-EC2-Classic",
      "Properties": {
        "DBSecurityGroupIngress": {
          "EC2SecurityGroupName": { "Ref": "InstanceSecurityGroup" }
        },
        "GroupDescription": "database access"
      }
    }

instead of:

"DBSecurityGroup": {
      "Type": "AWS::RDS::DBSecurityGroup",
      "Condition" : "Is-EC2-Classic",
      "Properties": {
        "DBSecurityGroupIngress": [{
          "EC2SecurityGroupName": { "Ref": "InstanceSecurityGroup" }
        }],
        "GroupDescription": "database access"
      }
    }

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-security-group.html

What I Did

The command I used to run the tool was:

.\terrascan.exe scan -f "<file path>" -i cft -o sarif

The error outputted on top of the SARIF file was:

ERROR: json: cannot unmarshal object into Go struct field Properties.Properties.DBSecurityGroupIngress of type []rds.DBSecurityGroup_Ingress

[VeraBE]

This was fixed and released in the latest version of awslabs/goformation

Is there a reason why Terrascan is still using v5 instead of v6?

I started to work on an update but it's taking me longer than expected, I'm not familiar with Go or Terrascan master...VeraBE:terrascan:updateGoFormation