Upload result to GHAS only if JAS entitled

jfrog · Sep 5, 2024 · d5f3ebc · d5f3ebc
1 parent bce4aee
commit d5f3ebc
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/scanrepository/scanrepository.go b/scanrepository/scanrepository.go
@@ -158,7 +158,7 @@ func (cfp *ScanRepositoryCmd) scanAndFixProject(repository *utils.Repository) er
 			cfp.analyticsService.AddScanFindingsToXscAnalyticsGeneralEventFinalize(scanResults.CountScanResultsFindings(true, true))
 		}
 
-		if repository.GitProvider.String() == vcsutils.GitHub.String() {
+		if scanResults.ExtendedScanResults != nil && scanResults.ExtendedScanResults.EntitledForJas && repository.GitProvider.String() == vcsutils.GitHub.String() {
 			// Uploads Sarif results to GitHub in order to view the scan in the code scanning UI
 			// Currently available on GitHub only
 			if err = utils.UploadSarifResultsToGithubSecurityTab(scanResults, repository, cfp.scanDetails.BaseBranch(), cfp.scanDetails.Client()); err != nil {