upload sarif

Signed-off-by: Anas Nashif <[email protected]>

Author: nashif

.github/workflows/eclair.yaml

@@ -105,17 +105,25 @@ jobs:
 
       - name: Scan code with Eclair
         run: |
-          eclair_licman -S P
-          ./scripts/twister -j 16 -p qemu_x86  -T samples/synchronization -i --build-only -v  -xZEPHYR_SCA_VARIANT=eclair -x=USE_CCACHE=0
+          sudo apt-get install -y jq
+          ./scripts/twister -j 16 -p qemu_x86  -T samples/synchronization -i --build-only -v  -xZEPHYR_SCA_VARIANT=eclair -x=USE_CCACHE=0 -xECLAIR_REPORTS_SARIF=1
+          jq -s '{ "$schema": "https://json.schemastore.org/sarif-2.1.0", "version": "2.1.0", "runs": map(.runs) | add }'  $(find twister-out -name "reportst.sarif")  > results.sarif
 
           ver=`git describe`
           echo "PAYLOAD_VERSION=${ver}" >> $GITHUB_ENV
           echo "PAYLOAD_DESC=${ver}" >> $GITHUB_ENV
 
-      - name: Upload artifacts
-        if: always()
-        uses: actions/upload-artifact@v4.2.0 # v4.2.0
+      - name: Upload SARIF as artifact
+        if: always() && github.event_name == 'push'
+        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
         with:
-          name: eclair-scan-results-${{ github.event_name }}-${{ github.ref_name }}
+          name: sarif
+          if-no-files-found: ignore
           path: |
-            ~/.hasplm
+            results.sarif
+
+      - name: Upload Analysis Results
+        if: always()
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: results.sarif