report.sarif not generated
See original GitHub issueI’m running infersharp on Azure DevOps, using the example provided.
Here’s the snippet from my pipeline YAML:
# Download binaries
- task: DownloadBuildArtifacts@0
displayName: 'Download binaries'
inputs:
buildType: 'current'
downloadType: 'single'
artifactName: 'infersharp-input'
downloadPath: '$(System.ArtifactsDirectory)'
- script: |
curl -o run_infersharp.sh https://raw.githubusercontent.com/microsoft/infersharpaction/v1.4/run_infersharp_ci.sh
chmod +x run_infersharp.sh
./run_infersharp.sh $(System.ArtifactsDirectory)
displayName: 'Run Infer# analysis'
# Display as build console logs
- script: cat $(Build.SourcesDirectory)/infer-out/report.txt
displayName: 'Infer# analysis result'
- script: ls $(Build.SourcesDirectory)/infer-out
displayName: 'list folder contents for debugging'
# Publish SARIF
# - task: PublishBuildArtifacts@1
# displayName: "Publish Infer# SARIF"
# inputs:
# PathtoPublish: "$(Build.SourcesDirectory)/infer-out/report.sarif"
# ArtifactName: "infersharp-output"
# publishLocation: "Container"
You can see I’ve commented out the publishing of the SARIF file, as it doesn’t seem to be present. Here’s the listing of the output folder after running infersharp:
bugs.txt capture.db capture.db-shm capture.db-wal config-impact-report.json costs-report.json logs report.json report.txt results.db results.db-shm results.db-wal tmp
Is report.sarif no longer generated by default?
Issue Analytics
- State:
- Created 10 months ago
- Comments:5 (2 by maintainers)
Top Results From Across the Web
Trivy does not generate a .sarif report for fs checks #1612
Description. I have an issue where a manual scan locally will shows CVE's, but if I tell it to output as sarif i...
Read more >How to Get Nice Error Reports Using SARIF in GitHub
To check that everything we've done works correctly, we will quickly upload our SARIF file manually and see the analysis results. To do...
Read more >Add debugging instructions to SARIF "no such file or ...
Error: SARIF file not found. This usually means the analyzer crashed before saving its report. To debug, please set the SECURE_LOG_LEVEL CI ...
Read more >SARIF output | Qodana Documentation
Qodana reports are formatted according to the SARIF specification and are contained in a JSON file. The Qodana implementation of SARIF ...
Read more >How to Get Nice Error Reports Using SARIF in GitHub
For GitHub to start analyzing SARIF files, you first need to set up a repository. When setting one up, we used this guide....
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
@xinshiMSFT thanks, that modification worked for us at least 👍
Thanks for your help, I will close this issue now. (By the way, I don’t think .inferconfig needs to be executable and have put a comment to that effect in #197 )