Andrew Eisenberg

We are aware of this and are working on a fix. Thanks for reporting.

Thank you for raising this issue. The upload is failing because the file includes too many SARIF `runs`. Looking at how the `microsoft/msvc-code-analysis-action` is implemented, each compile target is converted...

Honestly, I'm not 100% sure either. But it would be something like this. Since this is cmake, instead of calling the root target, call each of its child targets separately...

I've asked the code scanning team for some help with this.

There is no easy way around the limitation of 15 runs per upload. After some discussion, the best we can suggest is that you work with the maintainers of `microsoft/msvc-code-analysis-action`...

Unfortunately, the PR you linked to had to be reverted since it was too hard to maintain. The codeql-action will not work as a local action through `act`. The failure...

The ref that the upload action passes is grabbed from the `GITHUB_REF` environment variable (there's some extra checking for edge cases, but it's mostly just that). So, if the action...

~I haven't heard back to hear if the solution works, but you could add a step like this in your composite action before uploading:~ ``` - name: Update GITHUB_REF run:...

Yes, the upload-sarif action now supports a `ref` and `sha` input. So, you can specify the values you want using the `with` property: ```yml - uses: github/codeql-action/upload-sarif@v1 with: ref: '${{...

Thanks for raising your issue. Mac M1 support is still in beta. Please make sure to read about all of [the requirements for running on an M1](https://github.com/github/codeql-cli-binaries/blob/main/CHANGELOG.md#new-features-2). If you have...