-
Notifications
You must be signed in to change notification settings - Fork 594
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix(codeqlExecuteScan): added waiting for the SARIF file upload #4409
Conversation
…a/jenkins-library into codeql-sarif-upload
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
raised a few points concerning the implementation.
thanks!
…a/jenkins-library into codeql-sarif-upload
@@ -104,6 +104,22 @@ spec: | |||
- STAGES | |||
- STEPS | |||
default: false | |||
- name: sarifCheckMaxRetries | |||
type: int | |||
description: "Sets max retries for check SARIF file is uploaded when server doesn't response." |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I propose: "Maximum number of retries when waiting for the server to finish processing the SARIF upload. Only relevant, if checkForCompliance is enabled."
Kudos, SonarCloud Quality Gate passed! |
/it |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
OK to merge for me now. Thanks!
…4409) * added waiting for the sarif file uploaded & tests * increased polling time, added timeout for waiting response from server & tests * fixed handling error while waiting sarif uploaded * added params for checking sarif uploaded & refactor * added test logs * fixed logs and test * added returning missed error * changed params descriptions and server response error processing processing * fixed retrying logic * increased polling timeout params & refactored
Changes
Added waiting for the SARIF to upload before calling code-scanning APIs.
After scanning, the SARIF file is created, which must be uploaded to github. The codeql github upload-results command returns the URL of the SARIF file. This URL checks the status of the upload.