Update SARIF upload to use proper branch (#360)

This commit is contained in:
Matt Andreko
2025-03-20 14:28:17 -04:00
committed by GitHub
parent 29850298f2
commit 068ad76fd5
2 changed files with 4 additions and 0 deletions

View File

@@ -175,6 +175,8 @@ jobs:
uses: github/codeql-action/upload-sarif@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
with:
sarif_file: ${{ steps.container-scan.outputs.sarif }}
sha: ${{ contains(github.event_name, 'pull_request') && github.event.pull_request.head.sha || github.sha }}
ref: ${{ contains(github.event_name, 'pull_request') && format('refs/pull/{0}/head', github.event.pull_request.number) || github.ref }}
- name: Log out of Docker
if: ${{ env.is_publish_branch == 'true' }}

View File

@@ -46,6 +46,8 @@ jobs:
uses: github/codeql-action/upload-sarif@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
with:
sarif_file: cx_result.sarif
sha: ${{ contains(github.event_name, 'pull_request') && github.event.pull_request.head.sha || github.sha }}
ref: ${{ contains(github.event_name, 'pull_request') && format('refs/pull/{0}/head', github.event.pull_request.number) || github.ref }}
quality:
name: Quality scan