question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

report.sarif not generated

See original GitHub issue

I’m running infersharp on Azure DevOps, using the example provided.

Here’s the snippet from my pipeline YAML:

  # Download binaries
  - task: DownloadBuildArtifacts@0
    displayName: 'Download binaries'
    inputs:
      buildType: 'current'
      downloadType: 'single'
      artifactName: 'infersharp-input'
      downloadPath: '$(System.ArtifactsDirectory)'

  - script: |
      curl -o run_infersharp.sh https://raw.githubusercontent.com/microsoft/infersharpaction/v1.4/run_infersharp_ci.sh
      chmod +x run_infersharp.sh
      ./run_infersharp.sh $(System.ArtifactsDirectory)
    displayName: 'Run Infer# analysis'
  # Display as build console logs
  - script: cat $(Build.SourcesDirectory)/infer-out/report.txt
    displayName: 'Infer# analysis result'
  
  - script: ls $(Build.SourcesDirectory)/infer-out
    displayName: 'list folder contents for debugging'

  # Publish SARIF
  # - task: PublishBuildArtifacts@1
  #   displayName: "Publish Infer# SARIF"
  #   inputs:
  #     PathtoPublish: "$(Build.SourcesDirectory)/infer-out/report.sarif"
  #     ArtifactName: "infersharp-output"
  #     publishLocation: "Container"

You can see I’ve commented out the publishing of the SARIF file, as it doesn’t seem to be present. Here’s the listing of the output folder after running infersharp:

bugs.txt capture.db capture.db-shm capture.db-wal config-impact-report.json costs-report.json logs report.json report.txt results.db results.db-shm results.db-wal tmp

Is report.sarif no longer generated by default?

Issue Analytics

  • State:closed
  • Created 10 months ago
  • Comments:5 (2 by maintainers)

github_iconTop GitHub Comments

1reaction
spaasiscommented, Nov 18, 2022

@xinshiMSFT thanks, that modification worked for us at least 👍

0reactions
jkuekcommented, Nov 22, 2022

Thanks for your help, I will close this issue now. (By the way, I don’t think .inferconfig needs to be executable and have put a comment to that effect in #197 )

Read more comments on GitHub >

github_iconTop Results From Across the Web

Trivy does not generate a .sarif report for fs checks #1612
Description. I have an issue where a manual scan locally will shows CVE's, but if I tell it to output as sarif i...
Read more >
How to Get Nice Error Reports Using SARIF in GitHub
To check that everything we've done works correctly, we will quickly upload our SARIF file manually and see the analysis results. To do...
Read more >
Add debugging instructions to SARIF "no such file or ...
Error: SARIF file not found. This usually means the analyzer crashed before saving its report. To debug, please set the SECURE_LOG_LEVEL CI ...
Read more >
SARIF output | Qodana Documentation
Qodana reports are formatted according to the SARIF specification and are contained in a JSON file. The Qodana implementation of SARIF ...
Read more >
How to Get Nice Error Reports Using SARIF in GitHub
For GitHub to start analyzing SARIF files, you first need to set up a repository. When setting one up, we used this guide....
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found