[dsyme]

Summary

Count results directly from the SARIF object already available in uploadPostProcessedFiles instead of parsing the serialized upload payload again. Keep the existing missing-runs and missing-results array validation errors and continue reporting the same result count in upload telemetry.

Serialization, schema validation, compression, and upload behavior are unchanged. The counter is exported for direct unit coverage, and the action bundle and change note are included.

Validation

• Add direct tests for zero results, counts across multiple runs, and malformed runs/results arrays.
• npm run ava -- src/upload-lib.test.ts: all 48 upstream upload-library tests passed; the command also typechecks/transpiles the project.
• ESLint on changed TypeScript passed.
• Regenerated lib/entry-points.js with node build.mjs and validated the change note.
• Repeated the tests and bundle generation after a frozen npm ci using npm 11; the generated bundle was identical and no dependency/lockfile changes are included.

Validated locally with Node 24.22.2. This removes one redundant parse/allocation, not SARIF serialization, CodeQL query work, compression, or network transfer.

[Copilot]

🟢 Approval recommended

No active review issues are reported, and the change includes focused coverage for empty, multi-run, and malformed SARIF inputs while preserving validation behavior.

No open issues 🎉

1 file not reviewed

• lib/entry-points.js: Excluded by your content exclusion settings

What changed in this PR

This pull request updates SARIF upload telemetry to count results directly from the materialized SARIF object, avoiding redundant parsing while preserving validation behavior and telemetry values.

Changes:

• Exported and refactored countResultsInSarif.
• Added coverage for empty, multi-run, and malformed SARIF inputs.
• Added a changenote documenting the optimization.

File	Description
unreleased-change-notes/​count-materialized-sarif-results.md	Documents the upload post-processing efficiency improvement.
src/​upload-lib.ts	Counts results directly from the existing SARIF object for upload telemetry.
src/​upload-lib.test.ts	Tests result counting across runs and malformed SARIF arrays.

_{Review effort: Lite (auto)}