gitleaks / gitleaks-action

Protect your secrets using Gitleaks-Action
https://gitleaks.io
Other
330 stars 129 forks source link

Gitleaks Action failing : Invalid Licence #167

Open souro1212 opened 2 weeks ago

souro1212 commented 2 weeks ago

The GitLeaks GitHub Action is failing due to an "Invalid License" error, preventing the security scan from running. I am facing the same issue across multiple organisations.(Each org has unique licence ). Details:

PR: https://github.com/DevSecOps-AppSec/testrepo-reusable-workflow/actions/runs/11306937684/job/31448090343?pr=1

Error: Validating key returned [{"meta":{"id":"7e37c504-0d77-42b2-ba84-ae767f8a59b7"},"errors":[{"title":"Account does not have an active subscription","detail":"must have an active subscription to access this resource"}]}]

Screenshot_20241012_213447_Chrome.jpg

Impact: Security scans are blocked across multiple organisations.

capillary-chandana commented 2 weeks ago

Even I'm also facing the same issue across multiple organisations.

zricethezav commented 1 week ago

@souro1212 @capillary-chandana should be fixed now if you're pinned to v2 or latest. The license distributor software I'm using is declining my payment so I've disabled the check in code for now. Sorry for the inconvenience. Lemme know if your issue isn't fixed and I'll reopen this issue.

souro1212 commented 1 week ago

Screenshot_20241013_183323_GitHub.jpg

Now it's showing API limit reached. 😓

zricethezav commented 1 week ago

@souro1212 you're using an old version, please update to the latest v2.3.7 or pin to v2. Keygen validation won't work unless the payment method is accepted, which it ain't 🤷🏻‍♂️

souro1212 commented 1 week ago

Yup my bad, checked with a fresh PR. It's working now. Thanks a lot 😊

zricethezav commented 1 week ago

Gonna leave this open for a little longer for visibility actually

cristianmagana commented 1 week ago

Anyway I can get a pending license approved?

zricethezav commented 1 week ago

@cristianmagana technically you dont need a license anymore since I ripped out the license check (for the time being)