google / google/osv-scanner-action

configuration not found warning when using unified gh workflow

Open
#7 6 comments 0 reactions 1 assignee Claimed by @another-rex View on GitHub
Dominant language
Python
Stars
96
Forks
40
Avg merge
4d 21h
Merged PRs (30d)
4

Description

I'm using the unified osv-scanner gh workflow in my repo:

```yaml
name: OSV-Scanner

on:
pull_request:
branches:
- "main"
merge_group:
branches:
- "main"
push:
branches:
- "main"
schedule:
- cron: '44 15 * * 5'

permissions:
contents: read

jobs:
scan-scheduled:
if: ${{ github.event_name == 'push' || github.event_name == 'schedule' }}
uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@1f1242919d8a60496dd1874b24b62b2370ed4c78" # v1.7.1
permissions:
contents: read
# Require writing security events to upload SARIF file to security tab
security-events: write
scan-pr:
if: ${{ github.event_name == 'pull_request' || github.event_name == 'merge_group' }}
uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@1f1242919d8a60496dd1874b24b62b2370ed4c78" # v1.7.1
permissions:
contents: read
# Require writing security events to upload SARIF file to security tab
security-events: write
```

I get the following warning on PRs:
image

I guess that it's related to the fact that the job name is different between reusable workflows:
* [osv-scanner-reusable.yml](https://github.com/google/osv-scanner-action/blob/main/.github/workflows/osv-scanner-reusable.yml) - `osv-scan`
* [osv-scanner-reusable-pr.yml](https://github.com/google/osv-scanner-action/blob/main/.github/workflows/osv-scanner-reusable-pr.yml) - `scan-pr`

Can you assist?

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.