Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft GH-500 Exam - Topic 3 Question 16 Discussion

-- [Configure GitHub Advanced Security Tools in GitHub Enterprise]What step is required to run a SARIF-compatible (Static Analysis Results Interchange Format) tool on GitHub Actions?
A) Update the workflow to include a final step that uploads the results.
B) By default, the CodeQL runner automatically uploads results to GitHub on completion.
C) The CodeQL action uploads the SARIF file automatically when it completes analysis.
D) Use the CLI to upload results to GitHub.

Microsoft GH-500 Exam - Topic 3 Question 16 Discussion

Actual exam question for Microsoft's GH-500 exam
Question #: 16
Topic #: 3
[All GH-500 Questions]

-- [Configure GitHub Advanced Security Tools in GitHub Enterprise]

What step is required to run a SARIF-compatible (Static Analysis Results Interchange Format) tool on GitHub Actions?

Show Suggested Answer Hide Answer
Suggested Answer: A

When using a SARIF-compatible tool within GitHub Actions, it's necessary to explicitly add a step in your workflow to upload the analysis results. This is typically done using the upload-sarif action, which takes the SARIF file generated by your tool and uploads it to GitHub for processing and display in the Security tab. Without this step, the results won't be available in GitHub's code scanning interface.


by Janey at May 28, 2026, 10:27 PM

Limited Time Offer

25%

Off

Get Premium GH-500 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Pura
3 days ago
C) sounds familiar, but I’m not sure it’s the answer here.
upvoted 0 times
...
Thaddeus
8 days ago
I thought B) was correct, but I guess it's A).
upvoted 0 times
...
Yuette
13 days ago
A) is the right choice! You need that final step.
upvoted 0 times
...
Oliva
18 days ago
I’m leaning towards B because I recall that the CodeQL runner does some automatic uploads, but I’m not completely confident.
upvoted 0 times
...
Larue
23 days ago
I feel like I saw a question similar to this in practice, and it mentioned the CLI. Could it be D?
upvoted 0 times
...
Sherly
29 days ago
I remember something about the CodeQL action, so maybe it's C? It seems like it would make sense for it to handle that automatically.
upvoted 0 times
...
German
1 month ago
I think the answer might be A, but I'm not entirely sure if the workflow needs that final step for SARIF.
upvoted 0 times
...

Save Cancel