### Steps to reproduce 1. Run the command below. ```shell cd dist codeql database create .db-codeql-dist --language=javascript --build-mode=none codeql database analyze .db-codeql-dist javascript-security-extended.qls --format=sarifv2.1.0 --output=dist-main.sarif ``` 2. Open `dist-main.sarif` file in some SARIF viewer, e.g. in https://microsoft.github.io/sarif-web-component/ 3. See 2 `js/file-system-race` findings in `main.js`. ### References - [js/file-system-race](https://codeql.github.com/codeql-query-help/javascript/js-file-system-race/) - [CWE-367](https://github.com/advisories/GHSA-j253-hr3w-xhj7)