Updating CodeQL (#27453)

project-chip · Aug 24, 2023 · fe3b433 · fe3b433
1 parent 3fe4e1a
commit fe3b433
Showing 1 changed file with 26 additions and 0 deletions.
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -120,3 +120,29 @@ jobs:
         uses: github/codeql-action/analyze@v2
         with:
           category: "/language:${{matrix.language}}"
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v2
+        with:
+          upload: False
+          output: sarif-results
+
+      - name: filter-sarif
+        uses: advanced-security/filter-sarif@v1
+        with:
+          patterns: |
+            -**/third_party/**
+            -**/scripts/**
+          input: sarif-results/cpp.sarif
+          output: sarif-results/cpp.sarif
+
+      - name: Upload SARIF
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: sarif-results/java.sarif
+
+      - name: Upload loc as a Build Artifact
+        uses: actions/[email protected]
+        with:
+          name: sarif-results
+          path: sarif-results
+          retention-days: 1