Closed lohrm-stabl closed 4 months ago
also happens with v1.2. of this action & reviewdog v0.17.0:
Run reviewdog/action-trivy@v1.2
with:
github_token: ***
working_directory: src/
level: info
reporter: github-pr-review
filter_mode: nofilter
fail_on_error: true
flags: -tee
tool_name: trivy
trivy_version: latest
Run $GITHUB_ACTION_PATH/script.sh
$GITHUB_ACTION_PATH/script.sh
shell: /usr/bin/bash --noprofile --norc -e -o pipefail {0}
env:
REVIEWDOG_VERSION: v0.17.0
INPUT_GITHUB_TOKEN: ***
INPUT_WORKING_DIRECTORY: src/
INPUT_LEVEL: info
INPUT_REPORTER: github-pr-review
INPUT_TOOL_NAME: trivy
INPUT_FILTER_MODE: nofilter
INPUT_FAIL_ON_ERROR: true
INPUT_FLAGS: -tee
INPUT_TRIVY_VERSION: latest
INPUT_TRIVY_COMMAND:
INPUT_TRIVY_TARGET:
INPUT_TRIVY_FLAGS:
Preparing ...
Detected Linux running on 64bit, will install tools in /tmp/tmp.VQzYN6cbnO
š¶ Installing reviewdog (v0.17.0) ... https://github.com/reviewdog/reviewdog
reviewdog/reviewdog info checking GitHub for tag 'v0.17.0'
reviewdog/reviewdog info found version: 0.17.0 for v0.17.0/Linux/x86_64
reviewdog/reviewdog info installed /tmp/tmp.VQzYN6cbnO/reviewdog/reviewdog
Installing trivy (latest) ... https://github.com/aquasecurity/trivy
Downloading https://github.com/aquasecurity/trivy/releases/download/v0.48.3/trivy_0.48.3_Linux-64bit.tar.gz
Print trivy details ...
Version: 0.48.3
Running trivy with reviewdog š¶ ...
reviewdog: parse error: failed to unmarshal rdjson (DiagnosticResult): proto: syntax error (line 1:1): unexpected token
Error: Process completed with exit code 1.
@lohrm-stabl could you tell me any repository that I can check?
I don't have any public repository where this happens. We also stopped using the trivy action (since it didn't work).
@lohrm-stabl OK. Are these TypeScript projects, right?
Exactly. https://developer.hashicorp.com/terraform/cdktf to be specific
@lohrm-stabl I found the problem that trivy_command
and trivy_target
are necessary but not supplied in your config. However, we must warn when these parameters are not provided, so I created the PR.
@haya14busa It seems we can close this PR.
With the following action:
Gives the following output: