Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Error: Workflow failed! Uploading SARIF report to GitHub Advanced Security failed: Error: Cookies must be enabled to use GitHub. #283

Open
TorokEni opened this issue Dec 4, 2024 · 1 comment

Comments

@TorokEni
Copy link

TorokEni commented Dec 4, 2024

I am using synopsys-sig/[email protected] with the following config
blackduck_url: ${{ secrets.BLACKDUCK_URL }}
blackduck_token: ${{ secrets.BLACKDUCK_TOKEN }}
blackduck_scan_full: false
blackduck_scan_failure_severities: 'BLOCKER,CRITICAL'
blackduck_args: '--detect.diagnostic=true --detect.output.path=blackduck-reports'
github_token: ${{ secrets.GITHUB_TOKEN }}
blackduck_prComment_enabled: true
blackduck_reports_sarif_create: true
blackduck_upload_sarif_report: true
and i can not see the result directly in github - I get the error mentioned in the title.
If I use tvcsantos/[email protected] github action with the same github token, it works fine so I think it has the permission that i need. Can someone please help me?

@timostark
Copy link

timostark commented Dec 10, 2024

Issue is most likely the following line:

this.githubServerUrl = process.env[constants.GITHUB_ENVIRONMENT_VARIABLES.GITHUB_SERVER_URL] || ''
this.githubApiURL = this.githubServerUrl === constants.GITHUB_CLOUD_URL ? constants.GITHUB_CLOUD_API_URL : this.githubServerUrl

As far as I understand this for on premise installations of github you have to use GITHUB_API_URL for the API URL and NOT the server-url.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants