ci: use github/codeql-action/upload-sarif

redhat-plumbers-in-action · Apr 3, 2023 · 343aa16 · 343aa16
1 parent a78c071
commit 343aa16
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/.github/workflows/differential-shellcheck.yml b/.github/workflows/differential-shellcheck.yml
@@ -39,12 +39,17 @@ jobs:
         uses: ./
         with:
           shell-scripts: .github/.differential-shellcheck-scripts.txt
-          token: ${{ secrets.GITHUB_TOKEN }}
 
       - if: ${{ always() }}
-        name: Upload artifact with defects in SARIF format
+        name: Upload artifact with ShellCheck defects in SARIF format
         uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce
         with:
           name: Differential ShellCheck SARIF
           path: ${{ steps.ShellCheck.outputs.sarif }}
           retention-days: 7
+
+      - if: ${{ always() }}
+        name: Upload SARIF to GitHub using github/codeql-action/upload-sarif
+        uses: github/codeql-action/upload-sarif@bb28e7e59e2ad6c1e5400e671795b2fa1b2fca6f
+        with:
+          sarif_file: ${{ steps.ShellCheck.outputs.sarif }}