You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Error: Unable to upload "./test-results.sarif" as it is not valid SARIF #39
Error details: instance requires property "version"
Error details: instance requires property "runs"
{
"path": [],
"property": "instance",
"message": "requires property \"runs\"",
"schema": "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json",
"instance": {
"id": "66b357212xxxxxxxxxxd28206a",
"path": "/user/{username}",
"impact": "Leak",
"location": "Response Field.creation",
"name": "username",
"label": "DevOps Data",
"direction": "OUT",
"severity": "Medium",
"created_on": "2024-08-09T15:04:44.506Z",
"response": "{\"id\":9,\"username\":\"johnsmith\",\"firstName\":\"John\",\"lastName\":\"Smith\",\"email\":\"john@example.com\",\"password\":\"p@ssw0rd\",\"phone\":\"phone\",\"userStatus\":1}",
"explainer": "contact details.",
"remediation": "partial obfuscation techniques where feasible."
},
"name": "required",
"argument": "runs",
"stack": "instance requires property \"runs\""
}
Error: Unable to upload "./test-results.sarif" as it is not valid SARIF:
- instance is not allowed to have the additional property "id"
- instance is not allowed to have the additional property "path"
- instance is not allowed to have the additional property "impact"
Here is my action.yml
jobs:
build:
runs-on: ubuntu-latest
permissions:
security-events: write
steps:
- name: Github Action for API
uses: DevOps/Github-Action-CI-CD@v28.0
with:
hostname: https://cloudnetwork.in/
username: ${{ secrets.username }}
password: ${{ secrets.password }}
sarif-result-file: "devops-results.sarif"
- name: Read file content
id: read-file
run: |
cat devops-results.sarif
### Upload Sarif File ###
- name: Upload SARIF file
uses: github/codeql-action/upload-sarif@v3
with:
# Path to SARIF file relative to the root of the repository
sarif_file: ./devops-results.sarif
# Optional category for the results
# Used to differentiate multiple results for one commit
# category: my-analysis-tool
why im getting sarif upload failed
and also i have SARIF Validator
here is the result
https://sarifweb.azurewebsites.net/Validation
JSON1002: root: The required property 'version' is missing.
JSON1005: id: The schema does not define a property 'id', and the schema does not permit additional properties.
Activity