github / github/codeql

Code Scanning support for SARIF message string lookup in uploaded logs

Aberta
#11,512 7 comentários 0 reações 0 responsáveis Ver no GitHub
question
Linguagem predominante
CodeQL
Estrelas
10.1k
Forks
2.1k
Merge médio
2d 15h
PRs com merge (30d)
141

Descrição

The SARIF format supports the notion of indirect string lookups in its `message` object. Rather than directly providing a string in the `message.text` property, the indirect approach allows a specific set of other objects within the SARIF log to refer to the `message` object using its `id` property.

Currently, the CodeQL web service returns an error response when a log is uploaded which contains any `message` objects that don't provide a value in the `text` property:
`Error: Code Scanning could not process the submitted SARIF file: expected a result message`

The formal description of this feature and the decision tree for resolving the message string can be found here: [https://docs.oasis-open.org/sarif/sarif/v2.1.0/os/sarif-v2.1.0-os.html#_Toc34317468](https://docs.oasis-open.org/sarif/sarif/v2.1.0/os/sarif-v2.1.0-os.html#_Toc34317468)

Guia de contribuição

Abrir o guia de contribuição

Avaliação

Esta issue ainda não foi avaliada.

Receba novas issues na sua caixa de entrada

Um resumo curto de issues do GitHub para quem está começando.