Support the upload verb if an existing file is set #22

	name: MSDO Sample Workflow
	on:
	push:
	branches:
	- main

	permissions:
	id-token: write # This is required for federation to Defender for DevOps
	security-events: write # This is required to upload SARIF files

	jobs:
	sample:
	name: MSDO on ${{ matrix.os }}
	runs-on: ${{ matrix.os }}

	strategy:
	matrix:
	os: [windows-latest, ubuntu-latest]

	steps:

	# Checkout your code repository to scan
	- uses: actions/checkout@v3

	# Run analyzers
	- name: Run Microsoft Security DevOps Analysis
	uses: microsoft/security-devops-action@v1
	id: msdo

	# Upload alerts to the Security tab
	- name: Upload alerts to Security tab
	uses: github/codeql-action/upload-sarif@v2
	with:
	sarif_file: ${{ steps.msdo.outputs.sarifFile }}

	# Upload alerts file as a workflow artifact
	- name: Upload alerts file as a workflow artifact
	uses: actions/upload-artifact@v3
	with:
	name: alerts
	path: ${{ steps.msdo.outputs.sarifFile }}

Provide feedback