From 69bfc77c8e52a339b36da4591a005898c52e6741 Mon Sep 17 00:00:00 2001 From: Justin Wood Date: Sat, 24 Jun 2023 14:17:42 -0700 Subject: [PATCH] Trying to exclude these --- .github/workflows/codeql.yml | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index d6aa8ae2e5ff35..29ac3f8f0b7dd6 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -120,3 +120,29 @@ jobs: uses: github/codeql-action/analyze@v2 with: category: "/language:${{matrix.language}}" + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@v2 + with: + upload: False + output: sarif-results + + - name: filter-sarif + uses: advanced-security/filter-sarif@v1 + with: + patterns: | + -**/third_party/** + -**/scripts/** + input: sarif-results/cpp.sarif + output: sarif-results/cpp.sarif + + - name: Upload SARIF + uses: github/codeql-action/upload-sarif@v2 + with: + sarif_file: sarif-results/java.sarif + + - name: Upload loc as a Build Artifact + uses: actions/upload-artifact@v2.2.0 + with: + name: sarif-results + path: sarif-results + retention-days: 1 \ No newline at end of file