Skip to content

fix: add unique categories to Snyk SARIF uploads#64

Merged
kmcallorum merged 1 commit intomainfrom
fix/snyk-sarif-categories
Jan 31, 2026
Merged

fix: add unique categories to Snyk SARIF uploads#64
kmcallorum merged 1 commit intomainfrom
fix/snyk-sarif-categories

Conversation

@kmcallorum
Copy link
Copy Markdown
Owner

Summary

CodeQL now requires unique categories for each SARIF upload. This fixes the error:

The CodeQL Action does not support uploading multiple SARIF runs with the same category

Changes

Added category parameter to each upload-sarif step:

  • snyk-python - Python dependency scan
  • snyk-npm-{agent} - npm scans for pm, research, index
  • snyk-docker - Docker image scan

Test plan

  • Verify Snyk workflow completes successfully
  • Check that all SARIF results appear in Security tab

🤖 Generated with Claude Code

CodeQL now requires unique categories for each SARIF upload.
Add category parameter to each upload-sarif step:
- snyk-python
- snyk-npm-{agent}
- snyk-docker

Fixes: "The CodeQL Action does not support uploading multiple
SARIF runs with the same category" error

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
@kmcallorum kmcallorum merged commit 63b2c88 into main Jan 31, 2026
15 checks passed
@github-actions
Copy link
Copy Markdown
Contributor

Performance Benchmark Results

Benchmark Mean (μs) StdDev Min Max Ops/sec
test_bridge_initialization_performance 273.87 21.70 257.54 977.63 3651
test_get_available_agents_performance 0.22 0.03 0.21 1.77 4519455
test_client_initialization_performance 26.14 2.30 24.98 84.51 38258
test_config_from_env_performance 29.35 2.32 28.04 111.81 34069
test_config_initialization_performance 14.21 1.36 13.47 59.08 70366
test_full_agent_workflow_performance 0.27 0.04 0.26 2.24 3643470

Benchmark run on Python 3.11 (ubuntu-latest)

@codecov
Copy link
Copy Markdown

codecov Bot commented Jan 31, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant