Adjusted sarif upload to use the analysis action instead.

usnistgov · Sep 26, 2023 · fce4f68 · fce4f68
1 parent 2e91fac
commit fce4f68
Showing 1 changed file with 1 addition and 4 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -79,11 +79,8 @@ jobs:
     - name: Perform CodeQL Analysis
       if: github.event_name == 'push'
       uses: github/codeql-action/analyze@6a28655e3dcb49cb0840ea372fd6d17733edd8a4
-    - name: Upload CodeQL SARIF file
-      uses: github/codeql-action/upload-sarif@a09933a12a80f87b87005513f0abb1494c27a716
-      if: (github.event_name == 'push' || github.event_name == 'workflow_dispatch') && github.ref_name == 'develop'
       with:
-        token: ${{ secrets.COMMIT_TOKEN }}
+        upload: ${{ (github.event_name == 'push' || github.event_name == 'workflow_dispatch') && github.ref_name == 'develop' && 'always' || 'never' }}
     - name: Test Website
       run: |
         # this needs to be run as a second build to ensure source is fully generated by the previous step