GitHub Actions: CodeQL Analysis results

Question

I have integrated CodeQL in my github project via website. It works, it analyses and produce SARIF files. And then it says that results were successfully uploaded:

Uploading results
  Processing sarif files: ["/home/runner/work/my_project/results/cpp-builtin.sarif"]
  Uploading results
  Successfully uploaded results

Where? Where I can find these results and read them? How CodeQL indicates that there are issues found? My .yaml contains:

    - run: |
       sudo -n apt-get install -y autopoint gettext
       autoreconf --install
       ./configure
       make
    - name: Perform CodeQL Analysis
      uses: github/codeql-action/analyze@v1

Allan Chain · Accepted Answer · 2021-06-06 15:10:40Z

6

GitHub repository -> Security tab -> Code scanning alerts

GitHub docs

answered Jun 6, 2021 at 15:10

Allan Chain

2,9751 gold badge19 silver badges36 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

GitHub Actions: CodeQL Analysis results

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related