AdnaneKhan
commented
9 months ago I ran gato against a target repo with a 3rd party PAT (i.e. personal one) and it worked fine for enumeration. I then used a PAT for my work (classic PAT like before) GH account and when I tried to enumerate, it throws a NoneType error complaining about it not being subscriptable.
Additional Info:
gato -s e -t XXXXX --output-yaml . --output-json XXXXX.json [+] The authenticated user is: XXXX [!] The token has no scopes! [+] Enumerating the XXXXX organization! [!] The user has only public access! [+] About to enumerate 379 repos within the XXXXX organization! [+] Querying and caching workflow YAML files! Traceback (most recent call last): File "/root/gato/venv/bin/gato", line 8, in sys.exit(entry()) File "/root/gato/venv/lib/python3.10/site-packages/gato/main.py", line 6, in entry sys.exit(cli.cli(sys.argv[1:])) File "/root/gato/venv/lib/python3.10/site-packages/gato/cli/cli.py", line 83, in cli arguments.func(arguments, subparsers) File "/root/gato/venv/lib/python3.10/site-packages/gato/cli/cli.py", line 242, in enumerate orgs = [gh_enumeration_runner.enumerate_organization( File "/root/gato/venv/lib/python3.10/site-packages/gato/enumerate/enumerate.py", line 184, in enumerate_organization self.repo_e.construct_workflow_cache(result.json()['data']['nodes']) File "/root/gato/venv/lib/python3.10/site-packages/gato/enumerate/repository.py", line 190, in construct_workflow_cache owner = result['nameWithOwner'] TypeError: 'NoneType' object is not subscriptable
Ah, I've seen a similar issue while working on a newer feature. The GraphQL API can be a bit weird with what it returns (it'll be a 200 but the expected fields might not be present).
Will have a patch in to main and dev when I get some time. If you need this to work in the interim, try adding the following to construct_workflow_cache in repository.py:
Old:
for result in yml_results:
owner = result['nameWithOwner']
self.workflow_cache[owner] = list()
if not result['object']:
continueNew:
for result in yml_results:
# If we get any malformed/missing data just skip it and
# Gato will fall back to the contents API for these few cases.
if not result:
continue
if 'nameWithOwner' not in result:
continue
owner = result['nameWithOwner']
# Empty means no yamls, so just skip.
if not result['object']:
self.workflow_cache[owner] = list()
continue
DhiyaneshGeek
mas0nd
I ran gato against a target repo with a 3rd party PAT (i.e. personal one) and it worked fine for enumeration. I then used a PAT for my work (classic PAT like before) GH account and when I tried to enumerate, it throws a NoneType error complaining about it not being subscriptable.
Additional Info:
gato -s e -t XXXXX --output-yaml . --output-json XXXXX.json [+] The authenticated user is: XXXX [!] The token has no scopes! [+] Enumerating the XXXXX organization! [!] The user has only public access! [+] About to enumerate 379 repos within the XXXXX organization! [+] Querying and caching workflow YAML files! Traceback (most recent call last): File "/root/gato/venv/bin/gato", line 8, in
sys.exit(entry())
File "/root/gato/venv/lib/python3.10/site-packages/gato/main.py", line 6, in entry
sys.exit(cli.cli(sys.argv[1:]))
File "/root/gato/venv/lib/python3.10/site-packages/gato/cli/cli.py", line 83, in cli
arguments.func(arguments, subparsers)
File "/root/gato/venv/lib/python3.10/site-packages/gato/cli/cli.py", line 242, in enumerate
orgs = [gh_enumeration_runner.enumerate_organization(
File "/root/gato/venv/lib/python3.10/site-packages/gato/enumerate/enumerate.py", line 184, in enumerate_organization
self.repo_e.construct_workflow_cache(result.json()['data']['nodes'])
File "/root/gato/venv/lib/python3.10/site-packages/gato/enumerate/repository.py", line 190, in construct_workflow_cache
owner = result['nameWithOwner']
TypeError: 'NoneType' object is not subscriptable