diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 547ef145f..4623b610e 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -53,11 +53,26 @@ jobs: category: "/language:${{ matrix.language }}" output: sarif-results + - name: Upload SARIF + id: upload + uses: github/codeql-action/upload-sarif@v3 + with: + sarif_file: sarif-results/${{ matrix.language }}.sarif + wait-for-processing: true + + # optional: for debugging the uploaded sarif + - name: Upload loc as a Build Artifact + uses: actions/upload-artifact@v4 + with: + name: sarif-results-${{ matrix.language }} + path: sarif-results + retention-days: 1 + - name: Dismiss alerts if: github.ref == 'refs/heads/master' uses: advanced-security/dismiss-alerts@v1 with: - sarif-id: ${{ steps.analyze.outputs.sarif-id }} + sarif-id: ${{ steps.upload.outputs.sarif-id }} sarif-file: sarif-results/${{ matrix.language }}.sarif env: GITHUB_TOKEN: ${{ github.token }}