Add dismiss warnings for codeql

real-logic · Jun 17, 2024 · a7f7943 · a7f7943
1 parent 991cf3c
commit a7f7943
Showing 1 changed file with 16 additions and 1 deletion.
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -53,11 +53,26 @@ jobs:
           category: "/language:${{ matrix.language }}"
           output: sarif-results
 
+      - name: Upload SARIF
+        id: upload
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: sarif-results/${{ matrix.language }}.sarif
+          wait-for-processing: true
+
+      # optional: for debugging the uploaded sarif
+      - name: Upload loc as a Build Artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: sarif-results-${{ matrix.language }}
+          path: sarif-results
+          retention-days: 1
+
       - name: Dismiss alerts
         if: github.ref == 'refs/heads/master'
         uses: advanced-security/dismiss-alerts@v1
         with:
-          sarif-id: ${{ steps.analyze.outputs.sarif-id }}
+          sarif-id: ${{ steps.upload.outputs.sarif-id }}
           sarif-file: sarif-results/${{ matrix.language }}.sarif
         env:
           GITHUB_TOKEN: ${{ github.token }}