Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SARIF Result URI is using the Docker image name #10

Open
GeekMasher opened this issue Feb 17, 2022 · 0 comments
Open

SARIF Result URI is using the Docker image name #10

GeekMasher opened this issue Feb 17, 2022 · 0 comments

Comments

@GeekMasher
Copy link

After using the Prisma scan action, it seems that the SARIF results URI uses the Docker image name org/name:release which is not a valid URI. This means that if the up-stream solution like GitHub Code Scanning validates the URI (which it does) if will fail to upload correctly.

I took a look at the Action code and from what I could tell this is done server side and the Action just downloads the resulting SARIF. The fix might have to be server side in Prisma versus the Action itself.

+cc @josepalafox

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant