## Lesson — In SARIF reporting, the count of enforced rules

**Tags:** sarif, devops, security

In SARIF reporting, the count of enforced rules should match the unique definitions provided in the tool driver to prevent metadata inconsistencies. Reporting the length of the raw rule list when definitions are deduplicated leads to confusing scan results in security dashboards.
