Skip to main content

Enterprise Server 3.15 is currently available as a release candidate.

SARIF file is invalid

Code scanning can only process syntactically valid SARIF files. Invalid files are rejected.

About this error

Invalid SARIF
SARIF file invalid
SARIF ZIP upload is invalid
400: Bad Request if the sarif field is invalid

One of these errors is reported if code scanning cannot parse the SARIF file.

You are unlikely to see this error when using CodeQL analysis.

Confirming the cause of the error

You can investigate the underlying cause of the error by looking at the log for the workflow run that uploaded the analysis and by checking the SARIF file in a validator. For more information, see "Using workflow run logs" and visit the Microsoft SARIF validator.

Fixing the problem

After you identify the invalid parts of the SARIF file, you may be able to resolve smaller issues manually, but you may need to talk to the maintainers of the tool. For information about validation and the format supported by code scanning, see "SARIF support for code scanning."