gitleaks / gitleaks/gitleaks-action
GITLEAKS_NOTIFY_USER_LIST - does not work while setting up the workflow as a reusable workflow
- Dominant language
- JavaScript
- Stars
- 644
- Forks
- 194
- PR merge metrics
- No merged PRs in 30d
Description
I have setup the workflow env as in the main workflow and the "GITLEAKS_ENABLE_UPLOAD_ARTIFACT" is working as expected and no sarif is being uploaded with the action. However, GITLEAKS_NOTIFY_USER_LIST does not work as expected as gitleaks is not putting a comment ccing the user defined in input1. In fact, it does not do any comment.
env:
GITLEAKS_NOTIFY_USER_LIST: ${{ inputs.input1 }}
GITLEAKS_ENABLE_UPLOAD_ARTIFACT: ${{ inputs.input2 }}
Contributor guide
Research direction
Start by reproducing the reusable workflow with GITLEAKS_NOTIFY_USER_LIST set from inputs.input1, alongside GITLEAKS_ENABLE_UPLOAD_ARTIFACT from inputs.input2. Compare this behavior with the main workflow and trace the action entry point that handles notification comments; done means the configured user is mentioned in a comment when a finding is reported.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions, javascript
- Domain
- ci-cd, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100