github / github/ghas-jira-integration
Fix failing CodeQL Analysis SARIF upload by disabling default CodeQL setup
- Dominant language
- Python
- Stars
- 102
- Forks
- 57
- PR merge metrics
- No merged PRs in 30d
Description
Right now all CodeQL Analyze (Python) runs are failing on the SARIF upload. From reading the error message and the docs, I am guessing an **repo admin** should go to the `Settings > Advanced Security` and disable Default CodeQL.
Here's the error message:
> [Perform CodeQL Analysis](https://github.com/github/ghas-jira-integration/actions/runs/34532308226/job/103055711455?pr=127#annotation:4:391)
> Code Scanning could not process the submitted SARIF file:
> CodeQL analyses from advanced configurations cannot be processed when the default setup is enabled
Contributor guide
Research direction
Open the linked Perform CodeQL Analysis run and review the SARIF upload error. Then check Settings > Advanced Security and disable Default CodeQL as described; done means the CodeQL Analyze (Python) workflow completes without the SARIF processing failure.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions, python
- Domain
- ci-cd, security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- Under an hour
- Activity status
- Active
- Clarity
- Clearly specified
- Newbie friendliness
- 65/100