Open lindeberg opened 3 weeks ago
Hey @lindeberg thanks for reporting this. If you disable the OpenSSF scorecards does the fetch still fail? show-openssf-scorecard: false
Trying to narrow down the causes here
Failing still with show-openssf-scorecard: false
:
Describe the bug Error "fetch failed" when using proxy on a self-hosted runner with a proxy with least privelege network access, and these domains are allowed:
To Reproduce Steps to reproduce the behavior:
Set up a self-hosted runner with least privelege network access
Allow the domains above
Run dependency-review such that it triggers calls to these domains
See the error
Expected behavior It should be all good!
Screenshots![image](https://github.com/user-attachments/assets/7038ae32-4129-4a74-8e21-954f36da7577)
Action version v4.3.4