How to Create and Associate Security Tools in Devops Change workspace

[MOHAMMEDABR]

Need Help: Security Tool Not Appearing in DevOps Change Workspace (CodeQL Integration)

Hi everyone,

I’m trying to set up a Security Tool integration in DevOps Change Workspace for GitHub CodeQL, but I’m running into an issue where the tool never shows up in sn_vul_app_integration, and GitHub Actions returns the error:

source=DevOpsError, Error while determining security Tool.

Below are the steps I followed to create and associate the tool.

1. Created the Tool Integration

DevOps → Integrations → Tool Integrations → New

• Create manually: true

• Tool label: GitHub CodeQL

• Integration version: 1.0.0

2. Added Tool Integration Capability Mapping

Related list: Tool Integration Capability Mappings

• Tool integration: GitHub CodeQL

• Tool type capability: Security

3. Added Integration Capability Records

Two records under Integration Capabilities:

Connect

• Action: Connect

• Active: true

• Subflow: sn_devops_vul_ints.security_tool_connect

• Timeout: 45000

• Domain: global

Validate

• Action: Validate

• Active: true

• Subflow: sn_devops_vul_ints.security_tool_validate

• Timeout: 45000

• Domain: global

4. Updated Tool Integration Form Layout

Added fields:

• SecOps source integration

• Integration handler name

Set them to:

• SecOps source integration: (my Third‑Party Integration record from sn_sec_int_integration)

• Integration handler name: sn_devops_vul_ints.DevOpsSecurityToolIntegrationHandler

5. Verified Application Vulnerability Integration table

Checked Application Vulnerability Integration (sn_vul_app_integration).

Did not create any record like:

• Name: GitHub CodeQL DevOps Integration

• Source integration: (same SecOps source integration as above)

Problem

After creating the tool, it does NOT appear under sn_vul_app_integration.

And when running the GitHub Action:

yaml

- name: ServiceNow DevOps Security Results
  uses: ServiceNow/servicenow-devops-security-result@v5.1.0
  with:
    devops-integration-token: ${{ secrets.SERVICE_NOW_DEVOPS_INTEGRATION_TOKEN_DEV }}
    instance-url: ${{ vars.SERVICE_NOW_INSTANCE_URL_DEV }}
    tool-id: ${{ secrets.SERVICE_NOW_DEVOPS_ORCHESTRATION_TOOL_ID_DEV }}
    context-github: ${{ toJSON(github) }}
    job-name: 'CodeQL Security Scan'
    security-result-attributes: >
      {
        "scanner": "GitHub CodeQL",
        "tool": "GitHub Advanced Security",
        "scanType": "SAST",
        "resultsFile": "results/codeql-sarif/csharp.sarif"
      }

I get this error when a Change Request is created from GitHub:

source=DevOpsError, Error while determining security Tool.