Skip to content

Static Analysis Failing on Second SARIF Upload #593

@ArielSAdamsNASA

Description

@ArielSAdamsNASA

Checklist (Please check before submitting)

  • I reviewed the Contributing Guide.
  • I performed a cursory search to see if the bug report is relevant, not redundant, nor in conflict with other tickets.

Describe the bug
The cppcheck or static analysis workflow fails when reaching the upload of the second sarif file. This is because if you try to upload multiple SARIF files for the same tool and category in a single GitHub Actions workflow run, the misconfiguration is detected and the run will fail.

Expected behavior
Upload two SARIF files in one commit.

Additional context
Documentation: https://docs.github.com/en/code-security/code-scanning/integrating-with-code-scanning/sarif-support-for-code-scanning

To fix this issue, the workflow should use different ids, categories, or tool names.

Reporter Info
Ariel Adams, MCSG Tech

Metadata

Metadata

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions