upload sarif

Author: LadyBluenotes

.github/workflows/spelling.yml

@@ -25,35 +25,39 @@ on:
 
 jobs:
   spelling:
-    name: Check Spelling
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      pull-requests: read
-      actions: read
-      security-events: write
-    outputs:
-      followup: ${{ steps.spelling.outputs.followup }}
-    if: ${{ github.event_name == 'pull_request' || github.event_name == 'push'}}
-    concurrency:
-      group: spelling-${{ github.event.pull_request.number || github.ref }}
-    steps:
-      - name: check-spelling
-        id: spelling
-        uses: check-spelling/check-spelling@main
-        with:
-          suppress_push_for_open_pull_request: ${{ github.actor != 'dependabot[bot]' && 1 }}
-          checkout: true
-          check_file_names: 0
-          spell_check_this: check-spelling/spell-check-this@main
-          use_magic_file: 1
-          report-timing: 1
-          warnings: bad-regex,deprecated-feature,large-file,limited-references,noisy-file,non-alpha-in-dictionary,token-is-substring,whitespace-in-dictionary,unsupported-configuration,no-files-to-check
-          output: sarif
-          use_sarif: ${{ (!github.event.pull_request || (github.event.pull_request.head.repo.full_name == github.repository)) && 1 }}
-          extra_dictionary_limit: 20
-          extra_dictionaries: cspell:software-terms/dict/softwareTerms.txt
-          sarif_file: results.sarif
+    - name: Check Spelling
+      runs-on: ubuntu-latest
+      permissions:
+        contents: read
+        pull-requests: read
+        actions: read
+        security-events: write
+      outputs:
+        followup: ${{ steps.spelling.outputs.followup }}
+      if: ${{ github.event_name == 'pull_request' || github.event_name == 'push'}}
+      concurrency:
+        group: spelling-${{ github.event.pull_request.number || github.ref }}
+      steps:
+        - name: check-spelling
+          id: spelling
+          uses: check-spelling/check-spelling@main
+          with:
+            suppress_push_for_open_pull_request: ${{ github.actor != 'dependabot[bot]' && 1 }}
+            checkout: true
+            check_file_names: 0
+            spell_check_this: check-spelling/spell-check-this@main
+            use_magic_file: 1
+            report-timing: 1
+            warnings: bad-regex,deprecated-feature,large-file,limited-references,noisy-file,non-alpha-in-dictionary,token-is-substring,whitespace-in-dictionary,unsupported-configuration,no-files-to-check
+            output: sarif
+            use_sarif: ${{ (!github.event.pull_request || (github.event.pull_request.head.repo.full_name == github.repository)) && 1 }}
+            extra_dictionary_limit: 20
+            extra_dictionaries: cspell:software-terms/dict/softwareTerms.txt
+            sarif_file: results.sarif
+        - name: Upload SARIF to GitHub Code Scanning
+          uses: github/codeql-action/upload-sarif@v3
+          with:
+            sarif_file: results.sarif
 
   comment-push:
     name: Report (Push)