Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Filter CodeQL Sarif File to Exclude MsQuic #290

Merged
merged 6 commits into from
Dec 27, 2024
+20 −3
Merged

Filter CodeQL Sarif File to Exclude MsQuic #290

Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
f3ad831
Filter CodeQL Sarif File to Exclude MsQuic
nibanks Dec 27, 2024
8506b94
Update .github/workflows/build.yml
nibanks Dec 27, 2024
3cda588
Add conditional checks for SARIF upload steps
nibanks Dec 27, 2024
9326ca9
Update SARIF filter and name formatting
nibanks Dec 27, 2024
ac3dfce
Update actions to specific commit SHAs
nibanks Dec 27, 2024
5a50767
Update SARIF filter patterns in build.yml
nibanks Dec 27, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
23 changes: 20 additions & 3 deletions .github/workflows/build.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -68,9 +68,6 @@ jobs:
with:
languages: c-cpp
build-mode: manual
config: |
paths-ignore:
- msquic
- name: Build
shell: pwsh
run: ./build.ps1 -Arch ${{ matrix.arch }} -Tls ${{ matrix.tls }} -Link ${{ matrix.link }} -Install -BuildInstaller -Debug
Expand All @@ -79,6 +76,26 @@ jobs:
uses: github/codeql-action/analyze@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169
with:
category: "/language:c-cpp"
output: sarif-results
upload: failure-only
- name: Filter SARIF
if: ${{ (matrix.os == 'ubuntu') && (matrix.arch == 'x64') && (matrix.link == 'shared') }}
uses: advanced-security/filter-sarif@f3b8118a9349d88f7b1c0c488476411145b6270d
with:
patterns: -msquic/**/*
input: sarif-results/cpp.sarif
output: sarif-results/cpp.sarif
- name: Upload SARIF
if: ${{ (matrix.os == 'ubuntu') && (matrix.arch == 'x64') && (matrix.link == 'shared') }}
uses: github/codeql-action/upload-sarif@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169
with:
sarif_file: sarif-results/cpp.sarif
- name: Upload SARIF to Artifacts
if: ${{ (matrix.os == 'ubuntu') && (matrix.arch == 'x64') && (matrix.link == 'shared') }}
uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b
with:
name: sarif-results
path: sarif-results
- name: Upload
uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b
with:
Expand Down
Loading