eSlider/go-config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ops(ci): gitleaks Secret scan red на main — workflow баг (docker-шаг до mount workspace) #3

New Issue
Closed
opened 2026-09-04 15:56:36 +01:00 by eSlider · 1 comment
eSlider commented 2026-09-04 15:56:36 +01:00
Owner
Copy Link
Copy Source

Факт

GitHub Actions go-config: чек 'Secret scan (gitleaks)' падает stat ...: no such file на самом main (run 33714677787, funding push 03.09). Не утечка, не из-за конкретного PR — баг воркфлоу: docker-шаг гоняет gitleaks до монтирования workspace. Lint/Test (Go 1.22/1.23/stable/mac/windows) зелёные.

Что

Починить порядок шагов в .github/workflows (gitleaks после checkout/mount) или собрать gitleaks в шаге без docker. Детерминизм + зелёный CI на main.

Кому: SE (Gitea eSlider/go-config), PR-процесс. Обнаружено при синке go-config (A6, 2026-09-04).

## Факт GitHub Actions go-config: чек 'Secret scan (gitleaks)' падает `stat ...: no such file` на самом main (run 33714677787, funding push 03.09). Не утечка, не из-за конкретного PR — баг воркфлоу: docker-шаг гоняет gitleaks до монтирования workspace. Lint/Test (Go 1.22/1.23/stable/mac/windows) зелёные. ## Что Починить порядок шагов в .github/workflows (gitleaks после checkout/mount) или собрать gitleaks в шаге без docker. Детерминизм + зелёный CI на main. Кому: SE (Gitea eSlider/go-config), PR-процесс. Обнаружено при синке go-config (A6, 2026-09-04).
eSlider commented 2026-09-06 02:47:47 +01:00
Author
Owner
Copy Link
Copy Source

Fixed. Root cause: docker://zricethezav/gitleaks action mounts workspace at /github/workspace, but --source was the host path (github.workspace) which does not exist in the container -> 'stat ...: no such file' on every run. Followed the 2dph canon: gitleaks v8.30.1 binary + GITHUB_WORKSPACE. GitHub PR #14 merged (eb90564, Secret scan green), Gitea sync PR #4 merged. Closing.

Fixed. Root cause: docker://zricethezav/gitleaks action mounts workspace at /github/workspace, but --source was the host path (github.workspace) which does not exist in the container -> 'stat ...: no such file' on every run. Followed the 2dph canon: gitleaks v8.30.1 binary + GITHUB_WORKSPACE. GitHub PR #14 merged (eb90564, Secret scan green), Gitea sync PR #4 merged. Closing.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
eSlider (Andrey)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: eSlider/go-config#3