You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I performed a cursory search to see if the bug report is relevant, not redundant, nor in conflict with other tickets.
Describe the bug
The cppcheck or static analysis workflow fails when reaching the upload of the second sarif file. This is because if you try to upload multiple SARIF files for the same tool and category in a single GitHub Actions workflow run, the misconfiguration is detected and the run will fail.
Expected behavior
Upload two SARIF files in one commit.
Checklist (Please check before submitting)
Describe the bug
The cppcheck or static analysis workflow fails when reaching the upload of the second sarif file. This is because if you try to upload multiple SARIF files for the same tool and category in a single GitHub Actions workflow run, the misconfiguration is detected and the run will fail.
Expected behavior
Upload two SARIF files in one commit.
Additional context
Documentation: https://docs.github.com/en/code-security/code-scanning/integrating-with-code-scanning/sarif-support-for-code-scanning
To fix this issue, the workflow should use different ids, categories, or tool names.
Reporter Info
Ariel Adams, MCSG Tech
The text was updated successfully, but these errors were encountered: