Просмотр исходного кода

change: hardcode setup for sarif

Signed-off-by: DerSkythe <skif@skif.ws>
DerSkythe 2 лет назад
Родитель
Сommit
21a30edbdc
1 измененных файлов с 7 добавлено и 5 удалено
  1. 7 5
      .github/workflows/codeql.yml

+ 7 - 5
.github/workflows/codeql.yml

@@ -160,34 +160,36 @@ jobs:
       uses: github/codeql-action/analyze@v2
       env:
         REF_NAME: ${{ env.REF_NAME }}
+        CHECKOUT_PATH: ${{ env.OFW_PATH }}
       with:
         category: "/language:${{matrix.language}}"
         token: ${{ secrets.DEPENDABOT }}
         # Must be used only with sha
         #ref: ${{ env.REF_NAME }}
         #sha: ${{ github.sha }}
-        output: "../results"
+        output: "a${{ env.CHECKOUT_PATH }}/.github/results.sarif"
         check_name: "_"
         upload-database: false
         upload: 'failure-only'
-        checkout_path: ${{ github.workspace }}
+        checkout_path: "${{ github.workspace }}/${{ env.CHECKOUT_PATH }}"
 
     - name: List output
       env:
           REF_NAME: ${{ env.REF_NAME }}
       shell: pwsh
       run: |
-          ls "../results"
+          ls "applications_user/subbrute/.github/results.sarif"
 
     - name: Upload CodeQL SARIF
       uses: github/codeql-action/upload-sarif@v2
       env:
         REF_NAME: ${{ env.REF_NAME }}
+        CHECKOUT_PATH: ${{ env.OFW_PATH }}
       with:
         category: "/language:${{matrix.language}}"
         #token: ${{ secrets.DEPENDABOT }}
         # Must be used only with sha
         #ref: ${{ env.REF_NAME }}
         #sha: ${{ github.sha }}
-        sarif_file: "../results"
-        checkout_path: ${{ github.workspace }}
+        sarif_file: "a${{ env.CHECKOUT_PATH }}/.github/results.sarif"
+        checkout_path: "${{ github.workspace }}/${{ env.CHECKOUT_PATH }}"