From d176d8d61e7070332d8847fc6a45362f0aa9fd89 Mon Sep 17 00:00:00 2001 From: Niels Lohmann Date: Sun, 25 Oct 2026 12:08:36 +0100 Subject: [PATCH] Exclude single_include from flawfinder scan (#5912) Signed-off-by: Niels Lohmann --- .github/workflows/flawfinder.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/flawfinder.yml b/.github/workflows/flawfinder.yml index e8cb9f71f..2aebc6306 100644 --- a/.github/workflows/flawfinder.yml +++ b/.github/workflows/flawfinder.yml @@ -43,7 +43,8 @@ jobs: - name: flawfinder_scan uses: david-a-wheeler/flawfinder@c4216b74cf2639ffa98503768bd6e4299b5440c9 # v2.0.20 with: - arguments: '--sarif ./' + # single_include/ is omitted: it is generated from include/ and would report every finding twice + arguments: '--sarif ./cmake ./docs ./include ./src ./tests ./tools' output: 'flawfinder_results.sarif' - name: Upload analysis results to GitHub Security tab