Skip to content

Commit

Permalink
Fix discrepancies between index.md files and directory names in the c…
Browse files Browse the repository at this point in the history
…ode scanning docs (#41348)
  • Loading branch information
subatoi authored Aug 25, 2023
1 parent 92d5730 commit ca1311a
Show file tree
Hide file tree
Showing 15 changed files with 28 additions and 9 deletions.
3 changes: 2 additions & 1 deletion content/code-security/code-scanning/index.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,7 @@
---
title: Finding security vulnerabilities and errors in your code with code scanning
shortTitle: Code scanning
allowTitleToDifferFromFilename: true
intro: 'Keep your code secure by using {% data variables.product.prodname_code_scanning %} to identify and fix potential security vulnerabilities and other errors in your code.'
product: '{% data reusables.gated-features.code-scanning %}'
redirect_from:
Expand All @@ -25,5 +26,5 @@ children:
- /integrating-with-code-scanning
- /using-codeql-code-scanning-with-your-existing-ci-system
- /troubleshooting-code-scanning
- /troubleshooting-sarif
- /troubleshooting-sarif-uploads
---
Original file line number Diff line number Diff line change
Expand Up @@ -92,13 +92,13 @@ The file is successfully uploaded as both absolute URIs use the same URI scheme

You can check a SARIF file is compatible with {% data variables.product.prodname_code_scanning %} by testing it against the {% data variables.product.prodname_dotcom %} ingestion rules. For more information, visit the [Microsoft SARIF validator](https://sarifweb.azurewebsites.net/).

For each gzip-compressed SARIF file, SARIF upload supports a maximum size of 10 MB. Any uploads over this limit will be rejected. If your SARIF file is too large because it contains too many results, you should update the configuration to focus on results for the most important rules or queries.{% ifversion code-scanning-tool-status-page %} For more information, see "[AUTOTITLE](/code-security/code-scanning/troubleshooting-sarif/file-too-large)."{% endif %}
For each gzip-compressed SARIF file, SARIF upload supports a maximum size of 10 MB. Any uploads over this limit will be rejected. If your SARIF file is too large because it contains too many results, you should update the configuration to focus on results for the most important rules or queries.{% ifversion code-scanning-tool-status-page %} For more information, see "[AUTOTITLE](/code-security/code-scanning/troubleshooting-sarif-uploads/file-too-large)."{% endif %}

{% data variables.product.prodname_code_scanning_caps %} supports uploading a maximum number of entries for the data objects in the following table. If any of these objects exceeds its maximum value the SARIF file is rejected. For some objects, there is also a additional limit on the number of values that will be displayed. Whenever possible the most important values are shown. To get the most out of your analysis when it includes data above the supported limits, try to optimize the analysis configuration (for example, for the {% data variables.product.prodname_codeql %} tool, identify and disable the most noisy queries).{% ifversion code-scanning-tool-status-page %} For more information, see "[AUTOTITLE](/code-security/code-scanning/troubleshooting-sarif/results-exceed-limit)."{% endif %}
{% data variables.product.prodname_code_scanning_caps %} supports uploading a maximum number of entries for the data objects in the following table. If any of these objects exceeds its maximum value the SARIF file is rejected. For some objects, there is also a additional limit on the number of values that will be displayed. Whenever possible the most important values are shown. To get the most out of your analysis when it includes data above the supported limits, try to optimize the analysis configuration (for example, for the {% data variables.product.prodname_codeql %} tool, identify and disable the most noisy queries).{% ifversion code-scanning-tool-status-page %} For more information, see "[AUTOTITLE](/code-security/code-scanning/troubleshooting-sarif-uploads/results-exceed-limit)."{% endif %}

{% data reusables.code-scanning.sarif-limits %}

{% ifversion code-scanning-tool-status-page %}For information about other errors, see "[AUTOTITLE](/code-security/code-scanning/troubleshooting-sarif)"{% endif %}
{% ifversion code-scanning-tool-status-page %}For information about other errors, see "[AUTOTITLE](/code-security/code-scanning/troubleshooting-sarif-uploads)"{% endif %}

## Uploading more than one SARIF file for a commit

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -155,7 +155,7 @@ jobs:

## Further reading

{% ifversion code-scanning-tool-status-page %}- "[AUTOTITLE](/code-security/code-scanning/troubleshooting-sarif)"{% endif %}
{% ifversion code-scanning-tool-status-page %}- "[AUTOTITLE](/code-security/code-scanning/troubleshooting-sarif-uploads)"{% endif %}
- "[AUTOTITLE](/actions/using-workflows/workflow-syntax-for-github-actions)"
- "[AUTOTITLE](/actions/monitoring-and-troubleshooting-workflows/viewing-workflow-run-history)"
- "[AUTOTITLE](/code-security/code-scanning/using-codeql-code-scanning-with-your-existing-ci-system/about-codeql-code-scanning-in-your-ci-system)"
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -119,4 +119,4 @@ For integrated tools such as {% data variables.product.prodname_codeql %}, you c

{% endnote %}

For more information, see "[AUTOTITLE](/code-security/code-scanning/troubleshooting-code-scanning){% ifversion code-scanning-tool-status-page %}" and "[AUTOTITLE](/code-security/code-scanning/troubleshooting-sarif){% endif %}."
For more information, see "[AUTOTITLE](/code-security/code-scanning/troubleshooting-code-scanning){% ifversion code-scanning-tool-status-page %}" and "[AUTOTITLE](/code-security/code-scanning/troubleshooting-sarif-uploads){% endif %}."
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,8 @@ topics:
- Troubleshooting
versions:
feature: code-scanning-tool-status-page
redirect_from:
- /code-security/code-scanning/troubleshooting-sarif/default-setup-enabled
---

## About this error
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,8 @@ topics:
- Troubleshooting
versions:
feature: code-scanning-tool-status-page
redirect_from:
- /code-security/code-scanning/troubleshooting-sarif/file-too-large
---

## About this error
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,8 @@ topics:
- Troubleshooting
versions:
feature: code-scanning-tool-status-page
redirect_from:
- /code-security/code-scanning/troubleshooting-sarif/ghas-required
---

## About this error
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -14,5 +14,7 @@ children:
- /sarif-invalid
- /file-too-large
- /results-exceed-limit
redirect_from:
- /code-security/code-scanning/troubleshooting-sarif
---

Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,8 @@ topics:
- Troubleshooting
versions:
feature: code-scanning-tool-status-page
redirect_from:
- /code-security/code-scanning/troubleshooting-sarif/missing-token
---

## About this error
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,8 @@ topics:
- Troubleshooting
versions:
feature: code-scanning-tool-status-page
redirect_from:
- /code-security/code-scanning/troubleshooting-sarif/results-exceed-limit
---

## About {% data variables.product.prodname_code_scanning %} limits on SARIF results
Expand Down Expand Up @@ -49,7 +51,7 @@ When soft limits are exceeded, {% data variables.product.prodname_code_scanning

## Fixing "Analysis SARIF file rejected due to results limits"

There are many considerations and potential solutions for reducing the number of results included in a SARIF results file. For guidance, see "[AUTOTITLE](/code-security/code-scanning/troubleshooting-sarif/file-too-large)."
There are many considerations and potential solutions for reducing the number of results included in a SARIF results file. For guidance, see "[AUTOTITLE](/code-security/code-scanning/troubleshooting-sarif-uploads/file-too-large)."

## Fixing "Alert(s) in SARIF file exceeded thread flow location limits"

Expand All @@ -65,7 +67,7 @@ The simplest approach is generate a new SARIF file for each run and upload each

There are two possible approaches here.

1. Reduce the number of rules you use to analyze the code. For more information, see "[Defining the query suite to run](/code-security/code-scanning/troubleshooting-sarif/file-too-large#defining-the-query-suite-to-run)" and "[Excluding a query from analysis](/code-security/code-scanning/troubleshooting-sarif/file-too-large#excluding-a-query-from-analysis)" in "SARIF results file too large."
1. Reduce the number of rules you use to analyze the code. For more information, see "[Defining the query suite to run](/code-security/code-scanning/troubleshooting-sarif-uploads/file-too-large#defining-the-query-suite-to-run)" and "[Excluding a query from analysis](/code-security/code-scanning/troubleshooting-sarif-uploads/file-too-large#excluding-a-query-from-analysis)" in "SARIF results file too large."
1. Run the analysis twice, each time with a different set of rules, and upload both results files to {% data variables.product.prodname_code_scanning %}. For more information, see "[AUTOTITLE](/code-security/code-scanning/integrating-with-code-scanning/sarif-support-for-code-scanning#uploading-more-than-one-sarif-file-for-a-commit)."

## Fixing "Analysis SARIF file rejected due to extension limits"
Expand All @@ -76,7 +78,7 @@ The simplest approach is to create a separate SARIF file each time you run the t

## Fixing "Analysis SARIF file rejected due to location limit"

The best way to resolve this problem is usually to identify the query that reports too many locations and exclude it from analysis. For information on how to do this, see "[AUTOTITLE](/code-security/code-scanning/troubleshooting-sarif/file-too-large#excluding-a-query-from-analysis)."
The best way to resolve this problem is usually to identify the query that reports too many locations and exclude it from analysis. For information on how to do this, see "[AUTOTITLE](/code-security/code-scanning/troubleshooting-sarif-uploads/file-too-large#excluding-a-query-from-analysis)."

## Fixing "Analysis SARIF file rejected due to rule tag limits"

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,8 @@ topics:
- Troubleshooting
versions:
feature: code-scanning-tool-status-page
redirect_from:
- /code-security/code-scanning/troubleshooting-sarif/sarif-invalid
---

## About this error
Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,7 @@
---
title: CodeQL CLI commands manual
shortTitle: CodeQL CLI manual
allowTitleToDifferFromFilename: true
intro: >-
Reference information for the commands available in the most recent release of
{% data variables.product.prodname_codeql_cli %}.
Expand Down
1 change: 1 addition & 0 deletions content/code-security/codeql-cli/index.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,7 @@
---
title: Use the CodeQL CLI to secure your code
shortTitle: CodeQL CLI
allowTitleToDifferFromFilename: true
intro: 'Use {% data variables.product.prodname_codeql_cli %} to run {% data variables.product.prodname_codeql %} analyses locally.'
product: '{% data reusables.gated-features.codeql %}'
versions:
Expand Down
1 change: 1 addition & 0 deletions content/code-security/getting-started/index.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,7 @@
---
title: Getting started with code security
shortTitle: Getting started
allowTitleToDifferFromFilename: true
intro: 'Introduction to code security with {% data variables.product.product_name %}.'
versions:
fpt: '*'
Expand Down
1 change: 1 addition & 0 deletions content/code-security/security-overview/index.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,7 @@
---
title: Viewing security alerts for repositories in your organization
shortTitle: Security overview
allowTitleToDifferFromFilename: true
intro: 'View, sort, and filter the security alerts from across your organization in one place.'
product: '{% data reusables.gated-features.security-overview %}'
versions:
Expand Down

0 comments on commit ca1311a

Please sign in to comment.