Updating CodeQL (#27453)
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index d6aa8ae..29ac3f8 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -120,3 +120,29 @@
uses: github/codeql-action/analyze@v2
with:
category: "/language:${{matrix.language}}"
+ - name: Perform CodeQL Analysis
+ uses: github/codeql-action/analyze@v2
+ with:
+ upload: False
+ output: sarif-results
+
+ - name: filter-sarif
+ uses: advanced-security/filter-sarif@v1
+ with:
+ patterns: |
+ -**/third_party/**
+ -**/scripts/**
+ input: sarif-results/cpp.sarif
+ output: sarif-results/cpp.sarif
+
+ - name: Upload SARIF
+ uses: github/codeql-action/upload-sarif@v2
+ with:
+ sarif_file: sarif-results/java.sarif
+
+ - name: Upload loc as a Build Artifact
+ uses: actions/upload-artifact@v2.2.0
+ with:
+ name: sarif-results
+ path: sarif-results
+ retention-days: 1
\ No newline at end of file
