When using the JetBrains/ReSharper-InspectCode GitHub Action in repositories without GitHub Advanced Security (GHAS), the action fails with the following error:
Uploading code scanning results
Uploading results
Warning: Advanced Security must be enabled for this repository to use code scanning.
Error: Please verify that the necessary features are enabled: Advanced Security must be enabled for this repository to use code scanning.
Problem:
The action automatically uploads SARIF results to GitHub Code Scanning, but this feature requires GitHub Advanced Security which is only available on GitHub Enterprise or public repositories. There is currently no way to opt out of this upload step.
Expected behavior:
An option such as upload-sarif: false (or similar) that disables the automatic SARIF upload to GitHub Security, allowing users to still benefit from the inspection report artifact without requiring GHAS.
Workaround:
Currently users must avoid using the action altogether and fall back to manually installing JetBrains.ReSharper.GlobalTools via dotnet tool install and running jb inspectcode directly.
When using the JetBrains/ReSharper-InspectCode GitHub Action in repositories without GitHub Advanced Security (GHAS), the action fails with the following error:
Problem:
The action automatically uploads SARIF results to GitHub Code Scanning, but this feature requires GitHub Advanced Security which is only available on GitHub Enterprise or public repositories. There is currently no way to opt out of this upload step.
Expected behavior:
An option such as upload-sarif: false (or similar) that disables the automatic SARIF upload to GitHub Security, allowing users to still benefit from the inspection report artifact without requiring GHAS.
Workaround:
Currently users must avoid using the action altogether and fall back to manually installing JetBrains.ReSharper.GlobalTools via dotnet tool install and running jb inspectcode directly.