report.sarif.json doesn't exist when no findings

synopsys-sig / synopsys-action

Synopsys Action consuming Synopsys scanning tools

Apache License 2.0

24 stars 18 forks source link

report.sarif.json doesn't exist when no findings #221

Open lzdun opened 6 months ago

lzdun commented 6 months ago

If there where no security risks findings, SARIF report is not being created and synopsys-sig/synopsys-acgion@1.9.0 with synopsys-detect-9.4.0.jar action run completes with exit code 1.

Error message: .bridge/Blackduck SARIF Generator/report.sarif.json does not exist

I know it's rare case when you have no findings ;)