{"meta":{"title":"SARIF file is invalid","intro":"Code scanning can only process syntactically valid SARIF files. Invalid files are rejected.","product":"Security and code quality","breadcrumbs":[{"href":"/en/code-security","title":"Security and code quality"},{"href":"/en/code-security/reference","title":"Reference"},{"href":"/en/code-security/reference/code-scanning","title":"Code scanning"},{"href":"/en/code-security/reference/code-scanning/sarif-files","title":"SARIF files"},{"href":"/en/code-security/reference/code-scanning/sarif-files/troubleshoot-sarif-uploads","title":"Troubleshoot SARIF uploads"},{"href":"/en/code-security/reference/code-scanning/sarif-files/troubleshoot-sarif-uploads/sarif-invalid","title":"SARIF file invalid"}],"documentType":"article"},"body":"# SARIF file is invalid\n\nCode scanning can only process syntactically valid SARIF files. Invalid files are rejected.\n\n## About this error\n\n```text\nInvalid SARIF\nSARIF file invalid\nSARIF ZIP upload is invalid\n400: Bad Request if the sarif field is invalid\n```\n\nOne of these errors is reported if code scanning cannot parse the SARIF file.\n\nYou are unlikely to see this error when using CodeQL analysis.\n\n## Confirming the cause of the error\n\nYou can investigate the underlying cause of the error by looking at the log for the workflow run that uploaded the analysis and by checking the SARIF file in a validator. For more information, see [Using workflow run logs](/en/actions/how-tos/monitor-workflows/use-workflow-run-logs) and visit the [Microsoft SARIF validator](https://sarifweb.azurewebsites.net/).\n\n## Fixing the problem\n\nAfter you identify the invalid parts of the SARIF file, you may be able to resolve smaller issues manually, but you may need to talk to the maintainers of the tool. For information about validation and the format supported by code scanning, see [SARIF support for code scanning](/en/code-security/reference/code-scanning/sarif-files/sarif-support)."}