MetaMask / MetaMask/action-security-code-scanner
Unable to validate code scanning workflow
Nobody has claimed this yet.
- Dominant language
- JavaScript
- Stars
- 10
- Forks
- 7
- PR merge metrics
- No merged PRs in 30d
Description
Summary
When running scans the Security Code Scanner gives the following warning:
MetaMask Security Code Scanner
Unable to validate code scanning workflow: error: getWorkflow() failed: Error: Expected to find a code scanning workflow file at /home/runner/work/metamask-extension/metamask-extension/.github/workflows/security-code-scanner.yml, but no such file existed. This can happen if the currently running workflow checks out a branch that doesn't contain the corresponding workflow file.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the referenced .github/workflows/security-code-scanner.yml path and the linked GitHub Actions run to determine why the scanner cannot find the workflow in the checked-out branch. Read the action's workflow-validation entry point and reproduce the warning with a representative workflow; done means the scanner validates the intended workflow without this error.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions, javascript
- Domain
- ci-cd, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100