Inconsistency between the sarif file and information from vscode codeql panel

[lllssskkk]

I'm running a query. The vscode codeql addon gives the following analysis result.

From the image, i suppose there should be 8 paths in total. However, when i look at the sarif file, it only present four. What about the other four? The first and second thread flows belong to the upper one, third and forth belong to the lower one.

...
"codeFlows" : [ 
  {
    "first thread flow" : [{}]
  },
  {
     "second thread flow" : [{}]
  },
  {
     "third thread flow" : [{}]
  },
  {
     "forth thread flow" : [{}]
  },
  ],
...

[mbg]

Hi @lllssskkk 👋🏻

I believe the codeFlows property is specific to a SARIF "result" object. In VSCode, you show two results, so I'd expect there to be two "result" objects in the SARIF file, each with four elements in their respective codeFlows property. Could you check whether that's the case? If not, are you able to share the SARIF file?

[lllssskkk]

Hi, I apologize for late response. I didn't notice that i got replied. Yes, I can share the sarif file with you.

I double checked. Indeed you are right, but partially.

If i right click on the history and select "View Alerts (SARIF)", i shall see two elements in the results field, and each holds 4 threadFlows in codeFlows.

But running the same query, against the same database, from the command line, the result sarif file only contains one element in the results, it holds 4 threadFlows in codeFlows. The first and second thread flows belong to the upper one, third and forth belong to the lower one.

Also result messages are different. I attach both in the comment.

fromCodeQLPanel.json
directlyFromSarif.json

[github-actions]

This issue is stale because it has been open 14 days with no activity. Comment or remove the Stale label in order to avoid having this issue closed in 7 days.