action-baseline: Octokit problem
Hi, when I trigger module I got this:
FAIL-NEW: 0 FAIL-INPROG: 0 WARN-NEW: 8 WARN-INPROG: 0 INFO: 0 IGNORE: 0 PASS: 43
[@octokit/rest] `const Octokit = require("@octokit/rest")` is deprecated. Use `const { Octokit } = require("@octokit/rest")` instead
##[error]The ZAP Baseline scan has failed, starting to analyze the alerts. err: Error: The process '/usr/bin/docker' failed with exit code 2
Alerts present in the current report: true
Process completed successfully and a new issue #2 has been created for the ZAP Scan.
It seems that the importing library @octokit/rest is wrong.
About this issue
- Original URL
- State: closed
- Created 4 years ago
- Reactions: 3
- Comments: 29 (16 by maintainers)
For the record, the new version is now available.
The update would address the warning (https://github.com/actions/toolkit/issues/333), not sure if it’s as simple as, it’s a major update (from 1.x to 2.x).
The Octokit warning is not the cause why the build fails but the warnings/alerts ZAP found
WARN-NEW: 8.There’s no ETA for the update/release.
I think the warning, despite everything working as expected better to update.
This no longer happens with the latest version (v0.8.0).
Hi @kingthorin , I will test this scenario in the coming weekend and will send a PR.
Thanks.
You mentioned your use exited with code 3, that’s not related to Alerts, you seem to have some other failure. Ref: https://github.com/zaproxy/zaproxy/blob/efb404d38280dc9ecf8f88c9b0c658385861bdcf/docker/zap-baseline.py#L31-L35
Having the same problem and tried the various workarounds but didn’t have any luck. Is there an ETA for v0.4.0 currently? Would love to start using the action in production, but at the moment it fails our builds.