gitleaks / gitleaks/gitleaks-action
Gitleaks Action failing : Invalid Licence
- Dominant language
- JavaScript
- Stars
- 646
- Forks
- 195
- PR merge metrics
- No merged PRs in 30d
Description
The GitLeaks GitHub Action is failing due to an "Invalid License" error, preventing the security scan from running. I am facing the same issue across multiple organisations.(Each org has unique licence ).
Details:
PR: https://github.com/DevSecOps-AppSec/testrepo-reusable-workflow/actions/runs/11306937684/job/31448090343?pr=1
Error: Validating key returned [{"meta":{"id":"7e37c504-0d77-42b2-ba84-ae767f8a59b7"},"errors":[{"title":"Account does not have an active subscription","detail":"must have an active subscription to access this resource"}]}]

Impact: Security scans are blocked across multiple organisations.
Contributor guide
Research direction
Start with the linked GitHub Actions run and the reported “Invalid License” response to determine whether the failure is in gitleaks-action or the licensing service. The issue names no repository file or test, so inspect the action entry point and its licensing configuration first. Done means the security scan runs successfully for organisations with distinct licences.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions, javascript
- Domain
- ci-cd, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100