After using the Prisma scan action, it seems that the SARIF results URI uses the Docker image name org/name:release which is not a valid URI. This means that if the up-stream solution like GitHub Code Scanning validates the URI (which it does) if will fail to upload correctly.
I took a look at the Action code and from what I could tell this is done server side and the Action just downloads the resulting SARIF. The fix might have to be server side in Prisma versus the Action itself.
+cc @josepalafox
After using the Prisma scan action, it seems that the SARIF results URI uses the Docker image name
org/name:releasewhich is not a valid URI. This means that if the up-stream solution like GitHub Code Scanning validates the URI (which it does) if will fail to upload correctly.I took a look at the Action code and from what I could tell this is done server side and the Action just downloads the resulting SARIF. The fix might have to be server side in Prisma versus the Action itself.
+cc @josepalafox