search

jenkins-infra / jenkins-security-scan

GitHub Workflow and Action for the Jenkins Security Scan
MIT License
1 stars 6 forks source link

Support warning suppression #13

Closed yaroslavafenkin closed 1 year ago

yaroslavafenkin commented 1 year ago

Related: https://github.com/jenkins-infra/jenkins-codeql/pull/24

Addresses: https://github.com/jenkins-infra/jenkins-codeql/issues/4

daniel-beck commented 1 year ago

@yaroslavafenkin Did you test this? If so, could you provide the workflow log?

yaroslavafenkin commented 1 year ago

@yaroslavafenkin Did you test this? If so, could you provide the workflow log?

Tested on a private repo. Log: log.txt It failed on the stage of uploading the report, because of code scanning settings for the repo. From what I understand those are only available for organizations, but I'm not sure.

daniel-beck commented 1 year ago

It failed on the stage of uploading the report, because of code scanning settings for the repo

Expected, see "Missing access to Code Scanning API" at https://www.jenkins.io/doc/developer/security/scan/#common-problems