Skip to content

Perform SARIF post-processing independently of upload #3222

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
mbg merged 18 commits into from
Oct 24, 2025
Merged

Perform SARIF post-processing independently of upload #3222

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
18 commits
Select commit Hold shift + click to select a range
489ed91
Split SARIF post-processing steps from `uploadSpecifiedFiles` into a …
mbg Oct 13, 2025
6fbdd5f
Split SARIF uploading steps from `uploadSpecifiedFiles` into a function
mbg Oct 21, 2025
899bf2f
Use `postProcessSarifFiles` and `uploadProcessedFiles` in `uploadSarif`
mbg Oct 21, 2025
596de7f
Move `UploadKind` check into `uploadSarif`
mbg Oct 21, 2025
14139c9
Add test for `uploadSarif` with `upload: never`
mbg Oct 21, 2025
c2bec36
Add `post-process-output` input to `analyze` action
mbg Oct 21, 2025
12f3cfe
Write processed SARIF files if `post-process-output` input is provided
mbg Oct 21, 2025
def04c1
Add test for `uploadSarif` with output directory
mbg Oct 21, 2025
5e37670
Use `post-process-output` in PR check
mbg Oct 22, 2025
d79c0a1
Fix incomplete comment
mbg Oct 22, 2025
89d3359
Improve test name
mbg Oct 22, 2025
6f0fcbe
Rename `uploadSarif`
mbg Oct 22, 2025
8ff870a
Rename new input to `processed-sarif-path`
mbg Oct 22, 2025
aed27f7
Fix linter issue
mbg Oct 22, 2025
f48b54a
Fix fallback not being guarded by `uploadKind` check
mbg Oct 23, 2025
b9cd368
Merge remote-tracking branch 'origin/main' into mbg/upload-lib/post-p…
mbg Oct 24, 2025
f0452d5
Consistently use "post-processing"
mbg Oct 24, 2025
710606c
Check that `outputPath` is non-empty
mbg Oct 24, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Consistently use "post-processing"
  • Loading branch information
@mbg
mbg committed Oct 24, 2025
commit f0452d53667194f9f75d659eb44b683248333ef9
8 changes: 4 additions & 4 deletions .github/workflows/__quality-queries.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

4 changes: 2 additions & 2 deletions analyze/action.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -70,10 +70,10 @@ inputs:
description: Whether to upload the resulting CodeQL database
required: false
default: "true"
processed-sarif-path:
post-processed-sarif-path:
description: >-
Before uploading the SARIF files produced by the CodeQL CLI, the CodeQL Action may perform some post-processing
on them. Ordinarily, these processed SARIF files are not saved to disk. However, if a path is provided as an
on them. Ordinarily, these post-processed SARIF files are not saved to disk. However, if a path is provided as an
argument for this input, they are written to the specified directory.
required: false
wait-for-processing:
Expand Down
36 changes: 18 additions & 18 deletions lib/analyze-action.js
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

12 changes: 6 additions & 6 deletions lib/init-action-post.js
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

26 changes: 13 additions & 13 deletions lib/upload-lib.js
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading
Loading