Skip to content

Outdated scripts reference deprecated --format=sarifv2 causing scripts to fail #54

@bayu01

Description

@bayu01

The Python scripts in project contain references to a deprecated format.

docker run --rm --name codeql-container -v ${inputfile}:/opt/src -v ${outputfile}:/opt/results -e CODEQL_CLI_ARGS=database\ analyze\ /opt/results/source_db\ --format=sarifv2\ --output=/opt/results/issues.sarif\ ${language}-security-and-quality.qls mcr.microsoft.com/cstsectools/codeql-container

Error:

A fatal error occurred: Support for SARIF v2.0.0 (Committee Specification Draft 1) was removed in v2.8.2 of the CodeQL CLI. If you need this functionality, please file a public issue in https://github.com/github/codeql-cli-binaries, or open a private ticket with GitHub Support and request an escalation to engineering.
Error 2 executing from command.

Outcome:
When this happens the issues.sarif is not created.

Workaround:
Replace with --format=sarif-latest

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions