使用 GitHub Tools 执行 Github Upload Sarif Analysis

refstring

必填

The full Git reference for the analysis, formatted as `refs/heads/<branch name>`, `refs/tags/<tag>`, `refs/pull/<number>/merge`, or `refs/pull/<number>/head`.

repostring

必填

The name of the repository, without the `.git` extension. This is case-insensitive.

ownerstring

必填

The account owner of the repository. This is case-insensitive.

sarifstring

必填

A Base64 encoded string of a gzipped SARIF file. For more information, see '[SARIF support for code scanning](https://docs.github.com/code-security/secure-coding/sarif-support-for-code-scanning)'.

validateboolean

Specifies whether the uploaded SARIF file should be validated against the code scanning specifications. This is useful for integrators to ensure their SARIF files are correctly processed and rendered by GitHub.

tool_namestring

Name of the tool that generated the analysis. GitHub defaults this to "API" if omitted. A tool GUID in the SARIF can be used for filtering alerts.

commit_shastring

必填

The SHA of the commit to which the analysis you are uploading relates. Must be a 40-character Git SHA.

started_atstring

The timestamp indicating when the analysis run began, in ISO 8601 format: `YYYY-MM-DDTHH:MM:SSZ`.

checkout_uristring

The base URI of the checkout directory as it appears in the SARIF file. This property is used to convert absolute file paths to relative paths, enabling alerts to be correctly mapped to their location in the repository.

Github Upload Sarif Analysis

服务提供商说明

Github Upload Sarif Analysis

服务提供商说明

价格与限制

输入

可观察输出

使用此操作的技能

使用此操作的技能

相关使用场景

官方来源

使用此操作的技能