Advanced Security CodeQL SARIF - Failed to process log file. Reason: Specified argument was out of the range of valid values. Parameter name: baseUri

[felickz]

When a CodeQL SARIF file from the Advanced Security integration is used that contains

      "originalUriBaseIds": {
        "%SRCROOT%": {
          "uri": "/home/vsts/work/1/s",
          "properties": {
            "sourceFolderPassed": false
          }
        }
      },

Along with locations that use the uriBaseId as the `%SRCROOT% placeholder

        "locations": [
                {
                  "physicalLocation": {
                    "artifactLocation": {
                      "uri": "Controllers/ProductsController.cs",
                      "uriBaseId": "%SRCROOT%",
                      "index": 1
                    }
                  }
                }
              ],

The VS2022 Microsoft SARIF Viewer 3.0.136.13056 fails with error:

Processing the SARIF log file `C:\Users\chadbentz\source\repos\ghazdo\octodemo-felickz\csharp-synthetics\dvcsharp-api\SARIF\Formatted\7.391.Job.9c1d83.advancedsecurity.debug.sarif`.
Failed to process log file. Reason: Specified argument was out of the range of valid values.
Parameter name: baseUri

Sample attached!

7.391.Job.9c1d83.advancedsecurity.debug.zip

Note: VSCode extension does not have same failure

VS INFO

Microsoft Visual Studio Enterprise 2022
Version 17.11.5
VisualStudio.17.Release/17.11.5+35327.3
Microsoft .NET Framework
Version 4.8.09032

Installed Version: Enterprise

Visual C++ 2022 00476-80000-00000-AA393
Microsoft Visual C++ 2022

ASP.NET and Web Tools 17.11.231.19466
ASP.NET and Web Tools

Azure App Service Tools v3.0.0 17.11.231.19466
Azure App Service Tools v3.0.0

Azure Functions and Web Jobs Tools 17.11.231.19466
Azure Functions and Web Jobs Tools

C# Tools 4.11.0-3.24460.3+5649376e0e5f5db3743a94a62b073f2cce4be5d9
C# components used in the IDE. Depending on your project type and settings, a different version of the compiler may be used.

Common Azure Tools 1.10
Provides common services for use by Azure Mobile Services and Microsoft Azure Tools.

Cookiecutter 17.0.24138.2
Provides tools for finding, instantiating and customizing templates in cookiecutter format.

GitHub Copilot 0.2.1657.32929
GitHub Copilot is an AI pair programmer that helps you write code faster and with less work.

Microsoft Azure Tools for Visual Studio 2.9
Support for Azure Cloud Services projects

Microsoft JVM Debugger 1.0
Provides support for connecting the Visual Studio debugger to JDWP compatible Java Virtual Machines

Microsoft SARIF Viewer 3.0.136.13056
Visual Studio Static Analysis Results Interchange Format (SARIF) log file viewer

Node.js Tools 1.5.60329.1 Commit Hash:15fce86a17f9f33e5bd7ca7ccb9b216aff149252
Adds support for developing and debugging Node.js apps in Visual Studio

NuGet Package Manager 6.11.1
NuGet Package Manager in Visual Studio. For more information about NuGet, visit https://docs.nuget.org/

Python - Profiling support 17.0.24138.2
Profiling support for Python projects.

Python with Pylance 17.0.24138.2
Provides IntelliSense, projects, templates, debugging, interactive windows, and other support for Python developers.

Razor (ASP.NET Core) 17.11.3.2442001+68650a7d94261bc56a1f4bc522c2ee35314b1abb
Provides languages services for ASP.NET Core Razor.

SQL Server Data Tools 17.11.47.0
Microsoft SQL Server Data Tools

TypeScript Tools 17.0.30715.2002
TypeScript Tools for Microsoft Visual Studio

Visual Basic Tools 4.11.0-3.24460.3+5649376e0e5f5db3743a94a62b073f2cce4be5d9
Visual Basic components used in the IDE. Depending on your project type and settings, a different version of the compiler may be used.

Visual F# Tools 17.11.0-beta.24421.7+af2f522de602281d4ef5a7b71507c428e814c5c1
Microsoft Visual F# Tools

Visual Studio IntelliCode 2.2
AI-assisted development for Visual Studio.