gitleaks / gitleaks/gitleaks-action

Gitleaks Summary Generated Urls Broken

Open
#121 1 comment 3 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
644
Forks
194
PR merge metrics
No merged PRs in 30d

Description

Heyo!

The gitleaks summary is generating urls that are broken for all my private Org repos for all workflow event types.

The Url generated for example is https://github.com///actions/runs/undefined/commit/21f3bb48c90c82c688feb801ed5d539a6472273b

If I take out the "actions/runs/undefined" part of the url it seems to at least land on the commit page.

Any ideas whats happening here?

It seems odd because the url seems like it should be created based off eventJSON.repository.html_url and when I view that in the pipeline it looks correct without the actions/runs/undefined bit added.

Contributor guide

Open the contributing guide

Research direction

Start by tracing the summary URL generation from the GitHub Action entry point, focusing on the eventJSON.repository.html_url value and the inserted actions/runs/undefined segment. Reproduce the issue across workflow event types and private organization repositories; done means generated links resolve correctly without an undefined run identifier.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions, javascript
Domain
devops, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.