Repository navigation
upload-sarif 3.30.4 silently stopped uploading (2025-09-25) #3156
Description
Activity
Hi @TWiStErRob 👋🏻
I think the problem here is probably the
.jsonextension. We recently made some changes and probably (inadvertently) introduced an assumption that files used with theupload-sarifaction always have a.sarifextension.If you want to avoid pinning the older version of the Action, you could change the extension of your file from
.jsonto.sarifbefore usingupload-sarifwith it.Thanks! Makes sense. Will give it a try.
Depending on whether you want to support again it or not - if this is indeed the issue - will you make it clear if it's not supported via an error or at least a warning?
Workaround by rename confirmed working.
Depending on whether you want to support again it or not - if this is indeed the issue - will you make it clear if it's not supported via an error or at least a warning?
This was unintentional, so I have put together #3157 to restore the previous behaviour for non-
.sariffiles. I've also included a check that something was actually uploaded and a warning will be logged if not; hopefully that shouldn't be happening once that's merged and shipped, but I added it just in case.Workaround by renaming confirmed working.
Thanks for confirming!
We have released
v3.30.5of the CodeQL Action which includes an initial fix for this. You should be able to upgrade to that version now, if you want.- added 3 commits that reference this issue
on Oct 7, 2025 Closing this now since we have not observed any further issues since we fixed this.
Reacted by Róbert PappAgreed, thank you for the quick turnaround on the fix.
The only difference between the below two runs is the upload-sarif version.
The file being uploaded is identical: ghlint.sarif.json
3.30.3: https://github.com/TWiStErRob/net.twisterrob.astro/actions/runs/18020471393/job/51276343360?pr=275#step:5:1
The corresponding reusable workflow in case you want to see the usage: TWiStErRob/github-workflows@209b85b
3.30.4: https://github.com/TWiStErRob/net.twisterrob.astro/actions/runs/18020535044/job/51276572449?pr=276#step:5:1
The corresponding reusable workflow in case you want to see the usage: TWiStErRob/github-workflows@0699579
Workaround