google / google/oss-fuzz

GITHUB_TOKEN environment variable is not being propagated

Open
#9,823 3 comments 0 reactions 0 assignees View on GitHub
Dominant language
Shell
Stars
12.6k
Forks
2.9k
Avg merge
2d 2h
Merged PRs (30d)
62

Description

GITHUB_TOKEN environment variable is not being propagated

In a clusterfuzz lite environment, at build step,
I am providing the variable github-token
then translated to a docker environment variable GITHUB_TOKEN

then the flow is:
https://github.com/google/clusterfuzzlite/blob/main/actions/build_fuzzers/action.yml
env:
... LANGUAGE: ${{ inputs.language }}
... GITHUB_TOKEN: ${{ inputs.github-token }}
image: 'docker://gcr.io/oss-fuzz-base/clusterfuzzlite-build-fuzzers:v1'
...

at the time the execution is reaching my Dockerfile in .clusterfuzzlite/Dockerfile
the environment variable GITHUB_TOKEN is NOT defined anymore
thus preventing the ability to go get private repositories

Contributor guide

Open the contributing guide

Research direction

Start with actions/build_fuzzers/action.yml and .clusterfuzzlite/Dockerfile, then trace how GITHUB_TOKEN is passed from the action environment into the Docker build step. Reproduce the build and verify that the variable is available when the Dockerfile runs and permits fetching private repositories.

Written by the indexing model from the issue text.

Assessment

Tech stack
dockerfile, github-actions, shell
Domain
build-system, ci-cd, devops
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.