gitleaks / gitleaks/gitleaks-action

GITLEAKS_NOTIFY_USER_LIST - does not work while setting up the workflow as a reusable workflow

Open
#128 1 comment 1 reaction 0 assignees View on GitHub
Dominant language
JavaScript
Stars
644
Forks
194
PR merge metrics
No merged PRs in 30d

Description

I have setup the workflow env as in the main workflow and the "GITLEAKS_ENABLE_UPLOAD_ARTIFACT" is working as expected and no sarif is being uploaded with the action. However, GITLEAKS_NOTIFY_USER_LIST does not work as expected as gitleaks is not putting a comment ccing the user defined in input1. In fact, it does not do any comment.

env:
GITLEAKS_NOTIFY_USER_LIST: ${{ inputs.input1 }}
GITLEAKS_ENABLE_UPLOAD_ARTIFACT: ${{ inputs.input2 }}

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the reusable workflow with GITLEAKS_NOTIFY_USER_LIST set from inputs.input1, alongside GITLEAKS_ENABLE_UPLOAD_ARTIFACT from inputs.input2. Compare this behavior with the main workflow and trace the action entry point that handles notification comments; done means the configured user is mentioned in a comment when a finding is reported.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions, javascript
Domain
ci-cd, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.