chore: codeql sarif filter (#730)

netboxlabs · Jan 3, 2025 · 2216aa7 · 2216aa7
1 parent f6b1676
commit 2216aa7
Showing 1 changed file with 24 additions and 0 deletions.
diff --git a/.github/workflows/code-ql.yml b/.github/workflows/code-ql.yml
@@ -108,3 +108,27 @@ jobs:
 
     - name: Perform CodeQL Analysis
       uses: github/codeql-action/analyze@v3
+      with:
+        category: "/language:cpp"
+        output: sarif-results
+        upload: failure-only
+
+    - name: filter-sarif
+      uses: advanced-security/filter-sarif@v1
+      with:
+        patterns: |
+          -pktvisor/build/conan_home/**/*
+        input: sarif-results/cpp.sarif
+        output: sarif-results/cpp.sarif
+
+    - name: Upload SARIF
+      uses: github/codeql-action/upload-sarif@v3
+      with:
+        sarif_file: sarif-results/cpp.sarif
+
+    - name: Upload loc as a Build Artifact
+      uses: actions/upload-artifact@v4
+      with:
+        name: sarif-results
+        path: sarif-results
+        retention-days: 1