FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

Refactoring: Simplify upload SARIF flow and reuse loaded flags by henrymercer · Pull Request #2361 · github/codeql-action · GitHub

Refactoring: Simplify upload SARIF flow and reuse loaded flags - #2361

Merged
henrymercer merged 7 commits into
mainfrom
henrymercer/simplify-actions-only
Jul 8, 2024
Merged

henrymercer merged 7 commits into
mainfrom
henrymercer/simplify-actions-only

Conversation

Copy link
Copy Markdown
Contributor

Minor refactoring to simplify the flow for uploading SARIF files, and to reuse the loaded feature flags if we've already loaded them from disk or from the API.

Merge / deployment checklist

  • Confirm this change is backwards compatible with existing workflows.
  • Confirm the readme has been updated if necessary.
  • Confirm the changelog has been updated if necessary.

henrymercer requested a review from a team as a code owner July 1, 2024 12:01
henrymercer force-pushed the henrymercer/simplify-actions-only branch from eae5c66 to bfdafbc Compare July 1, 2024 12:40

aeisenberg left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

Looks like a general improvement, but just want to make sure about the payload change.

Comment thread src/upload-lib.ts Outdated
analysisKey,
analysisName,
category,

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

Previously, this was analysisName, but that doesn't look right since the util.getRequiredEnvParam("GITHUB_WORKFLOW") was being passed in. Now you're using category. This seems to be correct now, but will that mess up anything with our teleemtry since we're changing what we're stuffing into the analysis_name field of the payload?

henrymercer Jul 8, 2024
edited
Loading

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

You're right, let's keep it the same. My understanding is the category in the SARIF overrides what we have in the analysis_name field, and GITHUB_WORKFLOW gives the job name, which we could use as a fallback. We might be able to stop specifying the analysis_name field if we're sure we're always specifying a category in the SARIF, but I'll leave that cleanup for later.

henrymercer merged commit 6e04d51 into main Jul 8, 2024
henrymercer deleted the henrymercer/simplify-actions-only branch July 8, 2024 15:47

Copy link
Copy Markdown
Contributor

💭 The submit SARIF after failure workflow on main seems to be failing now after this was merged 😢 (though I'm not sure why it didn't fail in this PR's checks).

Copy link
Copy Markdown
Contributor

The latest run on main is passing, but I see the run associated with #2364 is failing. I'm rerunning since it might be transient.

Copy link
Copy Markdown
Contributor

...and it passed! So, guessing the error came from the server side.

henrymercer commented Jul 8, 2024
edited
Loading

Copy link
Copy Markdown
Contributor Author

This was due to an internal experiment on the API endpoints (unrelated to this PR). The relevant feature flag is now disabled. I've cced you in Slack.

This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants


Back | FazBrowse Home | New Git URL