GitHubSecurityLab / actions-permissions

GitHub token permissions Monitor and Advisor actions
MIT License
256 stars 20 forks source link

Add Elixir Hex’s `HEX_CACERTS_PATH` configuration in monitor setup script #5

Closed remi closed 1 year ago

remi commented 1 year ago

This pull request adds the HEX_CACERTS_PATH environment variable so Elixir commands like mix deps.get (which makes HTTPS requests) will correctly go through mitmproxy.

This should fix #4.

References

remi commented 1 year ago

@JarLob It worked for Elixir but it now fails for Docker 😅

Get "https://registry-1.docker.io/v2/": x509: certificate signed by unknown authority

Instead of supporting all of these tools, I’m wondering if it would be possible to simply copy the mitmproxy CA file to the /usr/local/share/ca-certificates directory? 😬 Would that work?

JarLob commented 1 year ago

You mean instead of /usr/local/share/ca-certificates/extra? Actually I don't really know what is the difference 😅 Could you please try it in you workflow? Just reference the action from your fork like: - uses: remi/actions-permissionsmonitor@your_branch

remi commented 1 year ago

Yep, I’ll try some things! 😀 🚀