-
Notifications
You must be signed in to change notification settings - Fork 331
Closed
Labels
Description
Checklist (Please check before submitting)
- I reviewed the Contributing Guide.
- I performed a cursory search to see if the bug report is relevant, not redundant, nor in conflict with other tickets.
Describe the bug
The cppcheck or static analysis workflow fails when reaching the upload of the second sarif file. This is because if you try to upload multiple SARIF files for the same tool and category in a single GitHub Actions workflow run, the misconfiguration is detected and the run will fail.
Expected behavior
Upload two SARIF files in one commit.
Additional context
Documentation: https://docs.github.com/en/code-security/code-scanning/integrating-with-code-scanning/sarif-support-for-code-scanning
To fix this issue, the workflow should use different ids, categories, or tool names.
Reporter Info
Ariel Adams, MCSG Tech
Reactions are currently unavailable