search

fortify / github-action

Fortify GitHub Actions
Other
10 stars 7 forks source link

GitHub Fortify action is failing with couple of issues #35

Closed priya785467 closed 1 month ago

priya785467 commented 2 months ago

1) When I am using this action in my workflow and running on a self hosted windows runner, somehow this is also downloading code ql action? am not sure of the reason? and this is taking my build for around 15 min

image

2) Also my fortify action is failing with error as below:

Expand-Archive :  is not a supported archive file format. .zip is the only supported archive file format.
At line:1 char:210
+ ...  Ignore)) { Expand-Archive -LiteralPath 'C:\actions-runner\_work\_tem ...
+                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidArgument: (:String) [Expand-Archive], IOException
    + FullyQualifiedErrorId : NotSupportedArchiveFileExtension,Expand-Archive
rsenden commented 2 months ago

Hi, as for CodeQL action being downloaded, that GitHub Action is required by GitHub to allow our action to publish Fortify results onto the GitHub Advanced Security dashboard. Even if you don't use this functionality, GitHub downloads all action repositories that are referenced from a GitHub Action/workflow. So, unfortunately, there's nothing we can do about this. Maybe GitHub allows for caching/pre-installing this action on your self-hosted runner, but you'll need to ask GitHub.

As for the action failing with an error, can you please share your action configuration (i.e., which environment variables are you passing to the Fortify action) and the full output, so we can identify which (sub-)action is causing this error? I assume this is a Windows runner, and I guess somewhere a tar/gz file is being downloaded, which apparently GitHub Actions cannot extract on Windows.

rsenden commented 1 month ago

Closing this issue as no further input was provided; please re-open if you're able to provide more details and still interested in getting this resolved.