Skip to content

Outdated scripts reference deprecated --format=sarifv2 causing scripts to fail #54

Description

@bayu01

The Python scripts in project contain references to a deprecated format.

docker run --rm --name codeql-container -v ${inputfile}:/opt/src -v ${outputfile}:/opt/results -e CODEQL_CLI_ARGS=database\ analyze\ /opt/results/source_db\ --format=sarifv2\ --output=/opt/results/issues.sarif\ ${language}-security-and-quality.qls mcr.microsoft.com/cstsectools/codeql-container

Error:

A fatal error occurred: Support for SARIF v2.0.0 (Committee Specification Draft 1) was removed in v2.8.2 of the CodeQL CLI. If you need this functionality, please file a public issue in https://github.com/github/codeql-cli-binaries, or open a private ticket with GitHub Support and request an escalation to engineering.
Error 2 executing from command.

Outcome:
When this happens the issues.sarif is not created.

Workaround:
Replace with --format=sarif-latest

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions