From 1cc4c372e35157524f9b32c0f6a6a921af28731d Mon Sep 17 00:00:00 2001 From: adrian adewunmi Date: Thu, 9 Jul 2026 11:43:08 +0100 Subject: [PATCH] ci(scorecard): use safe artifact name and add SARIF pre-upload debug --- .github/workflows/scorecard.yml | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 6fa5c762..f29d380e 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -58,10 +58,18 @@ jobs: # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF # format to the repository Actions tab. + - name: "Show SARIF file" + run: | + echo "SARIF file listing:" + ls -la results.sarif || true + echo "SARIF file type (if available):" + file results.sarif || true + - name: "Upload artifact" uses: actions/upload-artifact@v7 with: - name: sarif-file + # Use a simple, lowercase artifact name without spaces to avoid API validation + name: results-sarif path: results.sarif retention-days: 5