File 0208-otp-upload-sarif-results-from-SAST-tooling.patch of Package erlang
From ccdaddd3ffae26f4652485e526aca78fc2835ba2 Mon Sep 17 00:00:00 2001
From: Kiko Fernandez-Reyes <kiko@erlang.org>
Date: Mon, 26 Jan 2026 09:58:23 +0100
Subject: [PATCH] otp: upload sarif results from SAST tooling
Uploads to CodeQL sarif results generated from the compiler hardening options
---
.github/workflows/main.yaml | 2 ++
1 file changed, 2 insertions(+)
diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
index f195ef7809..c1ac211562 100644
--- a/.github/workflows/main.yaml
+++ b/.github/workflows/main.yaml
@@ -646,6 +646,8 @@ jobs:
run: docker run -v $PWD/:/github otp '/github/scripts/run-dialyzer'
- name: Check OSSF compiler flags
uses: ./.github/actions/ossf-compiler-flags-scanner
+ with:
+ upload: true
test:
name: Test Erlang/OTP
--
2.51.0