search

Checkmarx / ast-github-action

Checkmarx application security testing (AST) GitHub action
https://github.com/marketplace/actions/checkmarx-ast-github-action
Apache License 2.0
16 stars 23 forks source link

[BUG] Error validating scan types: Failed to authenticate - please provide an access key ID #204

Closed gilescope closed 3 weeks ago

gilescope commented 3 weeks ago

Describe the bug

Sometimes we have builds failing due to:

"Error validating scan types: Failed to authenticate - please provide an access key ID"

On reruns the problem goes away and we have a successful scan. These are the github action settings we are setting:

          cx_tenant: 
          base_uri: https://eu-2.ast.checkmarx.net/
          cx_client_id: ...
          cx_client_secret: ...
          additional_params: --threshold ...

Logs

Creating directory
Error validating scan types: Failed to authenticate - please provide an access key ID
PR decoration not created.
gilescope commented 3 weeks ago

Apparently the action was being started from dependabot and it didn't have the secret even though the repo did. Interesting!