github / github/ghas-jira-integration

Fix failing CodeQL Analysis SARIF upload by disabling default CodeQL setup

Open Beginner friendly
#128 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
102
Forks
57
PR merge metrics
No merged PRs in 30d

Description

Right now all CodeQL Analyze (Python) runs are failing on the SARIF upload. From reading the error message and the docs, I am guessing an **repo admin** should go to the `Settings > Advanced Security` and disable Default CodeQL.

Here's the error message:

> [Perform CodeQL Analysis](https://github.com/github/ghas-jira-integration/actions/runs/34532308226/job/103055711455?pr=127#annotation:4:391)
> Code Scanning could not process the submitted SARIF file:
> CodeQL analyses from advanced configurations cannot be processed when the default setup is enabled

Contributor guide

Open the contributing guide

Research direction

Open the linked Perform CodeQL Analysis run and review the SARIF upload error. Then check Settings > Advanced Security and disable Default CodeQL as described; done means the CodeQL Analyze (Python) workflow completes without the SARIF processing failure.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions, python
Domain
ci-cd, security
Issue type
Bug
Difficulty
2/5
Estimated time
Under an hour
Activity status
Active
Clarity
Clearly specified
Newbie friendliness
65/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.