Updating CodeQL (#27453)

project-chip · Nov 13, 2023 · d301cc6 · d301cc6
1 parent 8e2bad9
commit d301cc6
Showing 1 changed file with 26 additions and 0 deletions.
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -120,3 +120,29 @@ jobs:
         uses: github/codeql-action/analyze@v2
         with:
           category: "/language:${{matrix.language}}"
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v2
+        with:
+          upload: False
+          output: sarif-results
+
+      - name: filter-sarif
+        uses: advanced-security/filter-sarif@v1
+        with:
+          patterns: |
+            -**/third_party/**
+            -**/scripts/**
+          input: sarif-results/cpp.sarif
+          output: sarif-results/cpp.sarif
+
+      - name: Upload SARIF
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: sarif-results/java.sarif
+
+      - name: Upload loc as a Build Artifact
+        uses: actions/[email protected]
+        with:
+          name: sarif-results
+          path: sarif-results
+          retention-days: 1