From 3c7d8ad21442577faf21a1d383c1e0af1094ac13 Mon Sep 17 00:00:00 2001 From: Mortifia Date: Sat, 25 Jul 2026 02:45:36 +0200 Subject: [PATCH] =?UTF-8?q?chore:=20arr=C3=AAte=20l'upload=20SARIF=20de=20?= =?UTF-8?q?Codacy=20vers=20code-scanning?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit 7626 des 7641 alertes de l'onglet Security > Code scanning étaient des linters de style (Stylelint, CSSLint, remark-lint...) agrégés par Codacy et uploadés en SARIF, sans rapport avec la sécurité — elles noyaient les vraies alertes CodeQL (15, déjà corrigées en #335, workflow séparé et non affecté par ce changement). Codacy continue de tourner et reste visible sur son propre tableau de bord via project-token, juste sans polluer l'onglet natif GitHub. Closes #337 --- .github/workflows/codacy.yml | 22 +++++++--------------- 1 file changed, 7 insertions(+), 15 deletions(-) diff --git a/.github/workflows/codacy.yml b/.github/workflows/codacy.yml index 98466442..2ca6f385 100755 --- a/.github/workflows/codacy.yml +++ b/.github/workflows/codacy.yml @@ -29,8 +29,6 @@ jobs: codacy-security-scan: permissions: contents: read # for actions/checkout to fetch code - security-events: write # for github/codeql-action/upload-sarif to upload SARIF results - actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status name: Codacy Security Scan runs-on: ubuntu-latest steps: @@ -38,7 +36,12 @@ jobs: - name: Checkout code uses: actions/checkout@v3 - # Execute Codacy Analysis CLI and generate a SARIF output with the security issues identified during the analysis + # Execute Codacy Analysis CLI. Le résultat n'est plus uploadé vers + # l'onglet "code scanning" de GitHub (retiré : Codacy y agrège des + # linters de style — Stylelint, CSSLint, remark-lint... — sans + # rapport avec de la sécurité, ce qui noyait les vraies alertes + # CodeQL sous des milliers de faux positifs "none severity"). Reste + # visible sur le tableau de bord Codacy lui-même via le project-token. - name: Run Codacy Analysis CLI uses: codacy/codacy-analysis-cli-action@d840f886c4bd4edc059706d09c6a1586111c540b with: @@ -46,16 +49,5 @@ jobs: # You can also omit the token and run the tools that support default configurations project-token: ${{ secrets.CODACY_PROJECT_TOKEN }} verbose: true - output: results.sarif - format: sarif - # Adjust severity of non-security issues - gh-code-scanning-compat: true - # Force 0 exit code to allow SARIF file generation - # This will handover control about PR rejection to the GitHub side + # Force 0 exit code : ce workflow ne doit pas bloquer de PR max-allowed-issues: 2147483647 - - # Upload the SARIF file generated in the previous step - - name: Upload SARIF results file - uses: github/codeql-action/upload-sarif@v2 - with: - sarif_file: results.sarif