Skip to content

Fix upload-sarif Action failing if there are no Code Scanning SARIF files #3123

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
mbg merged 10 commits into from
Sep 19, 2025
Merged

Fix upload-sarif Action failing if there are no Code Scanning SARIF files #3123

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
35454d3
Refactor CQ SARIF upload in `upload-sarif` into a function
mbg Sep 18, 2025
a6161a8
Call `lstatSync` on `sarifPath` earlier and check that the path exist…
mbg Sep 18, 2025
c8e017d
Move `isDirectory` check into `findAndUpload`
mbg Sep 18, 2025
696b467
Handle single file case in `findAndUpload`
mbg Sep 18, 2025
a2ce099
Use `findAndUpload` for Code Scanning
mbg Sep 18, 2025
d378195
Add new `sarif-ids` output to `upload-sarif` action
mbg Sep 18, 2025
7bea0e2
Fix outdated comment
mbg Sep 18, 2025
e33b0ab
Update `upload-quality-sarif` check to only use `code-quality`
mbg Sep 18, 2025
6249793
Disable `cpp` in `upload-quality-sarif` check
mbg Sep 18, 2025
db37d92
Fix condition
mbg Sep 18, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Update upload-quality-sarif check to only use code-quality
  • Loading branch information
@mbg
mbg committed Sep 19, 2025
commit e33b0ab3ac30b90dff43239fd6ba035a77c2fed2
8 changes: 5 additions & 3 deletions .github/workflows/__upload-quality-sarif.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

7 changes: 5 additions & 2 deletions pr-checks/checks/upload-quality-sarif.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,8 +7,7 @@ steps:
with:
tools: ${{ steps.prepare-test.outputs.tools-url }}
languages: cpp,csharp,java,javascript,python
config-file: ${{ github.repository }}/tests/multi-language-repo/.github/codeql/custom-queries.yml@${{ github.sha }}
analysis-kinds: code-scanning,code-quality
analysis-kinds: code-quality
- name: Build code
run: ./build.sh
# Generate some SARIF we can upload with the upload-sarif step
Expand All @@ -18,6 +17,10 @@ steps:
sha: '5e235361806c361d4d3f8859e3c897658025a9a2'
upload: never
- uses: ./../action/upload-sarif
id: upload-sarif
with:
ref: 'refs/heads/main'
sha: '5e235361806c361d4d3f8859e3c897658025a9a2'
- name: "Check output from `upload-sarif` step"
if: fromJSON(steps.upload-sarif.sarif-ids)[0].analysis != 'code-quality'
Comment thread
mbg marked this conversation as resolved.
Outdated
run: exit 1