GitHub Tools の Github Upload Sarif Analysis

refstring

必須

The full Git reference for the analysis, formatted as `refs/heads/<branch name>`, `refs/tags/<tag>`, `refs/pull/<number>/merge`, or `refs/pull/<number>/head`.

repostring

必須

The name of the repository, without the `.git` extension. This is case-insensitive.

ownerstring

必須

The account owner of the repository. This is case-insensitive.

sarifstring

必須

A Base64 encoded string of a gzipped SARIF file. For more information, see '[SARIF support for code scanning](https://docs.github.com/code-security/secure-coding/sarif-support-for-code-scanning)'.

validateboolean

Specifies whether the uploaded SARIF file should be validated against the code scanning specifications. This is useful for integrators to ensure their SARIF files are correctly processed and rendered by GitHub.

tool_namestring

Name of the tool that generated the analysis. GitHub defaults this to "API" if omitted. A tool GUID in the SARIF can be used for filtering alerts.

commit_shastring

必須

The SHA of the commit to which the analysis you are uploading relates. Must be a 40-character Git SHA.

started_atstring

The timestamp indicating when the analysis run began, in ISO 8601 format: `YYYY-MM-DDTHH:MM:SSZ`.

checkout_uristring

The base URI of the checkout directory as it appears in the SARIF file. This property is used to convert absolute file paths to relative paths, enabling alerts to be correctly mapped to their location in the repository.

Github Upload Sarif Analysis

プロバイダーの説明

Github Upload Sarif Analysis

プロバイダーの説明

料金と制限

入力

確認できる出力

この Action を使用する Skills

この Action を使用する Skills

関連ユースケース

公式ソース

この Action を使用する Skills