Skip to content

Commit f4e103a

Browse files
authored
Add SARIF upload step to security workflow
Added step to upload SARIF file generated by Microsoft Security DevOps to GitHub. Signed-off-by: pavankad <40609894+pavankad@users.noreply.github.com>
1 parent b97b3a2 commit f4e103a

1 file changed

Lines changed: 5 additions & 0 deletions

File tree

.github/workflows/msdevopssec.yaml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -28,6 +28,11 @@ jobs:
2828
- name: Run Microsoft Security DevOps
2929
uses: microsoft/security-devops-action@latest
3030
id: msdo
31+
32+
- name: Upload SARIF to GitHub
33+
uses: github/codeql-action/upload-sarif@v3
34+
with:
35+
sarif_file: ${{ steps.msdo.outputs.sarifFile }}
3136
# with:
3237
# config: string. Optional. A file path to an MSDO configuration file ('*.gdnconfig').
3338
# policy: 'GitHub' | 'microsoft' | 'none'. Optional. The name of a well-known Microsoft policy. If no configuration file or list of tools is provided, the policy may instruct MSDO which tools to run. Default: GitHub.

0 commit comments

Comments
 (0)