[Bug]: Creating PR decoration issue for Github Enterprise after 2.3.25

[mloebens]

What happened?

Action fails due trying to create PR decoration in Github but I am using a Github Enterprise which has its own url.

Version

2.3.25

Operating System & Version

Ubuntu 22.04

Specify Other OS Version

N/A

Relevant log output

Creating PR decoration for scan ID: xxxx

Error: Failed creating github PR Decoration: CODE: 0, 401 Unauthorized on GET request for "https://api.github.com/repos/xxxx/xxxx/pulls/xxxx": "{"message":"Bad credentials","documentation_url":"https://docs.github.com/rest","status":"401"}"

[github-actions]

Internal Jira issue: AST-111128

[cx-umesh-waghode]

@mloebens is it possible to share logs by adding --debug flag. If you are using Github Action, you can pass this flag in additional_params.

Also confirm that you are passing the value for the flag --code-repository-url

[cmotsn]

Same issue here.
Trying to pass the flag mentioned above as part of the additional_params, I get: Error: unknown flag: --code-repository-url

Couldn't the checkmarx/ast-github-action action determine the repository URL automatically and pass it to the CLI tool? Or add a specific input so that it's clear what need to be done in the case of an on-premise GH server

[mloebens]

Hi @cx-umesh-waghode,

I had the same issue as @cmotsn, the flag is unknown when passing through scan_params.
I do not see any other relevant log, everything other than the decorator works fine.

Here is how I am using

  - name: CxONE GitHub Action (from the vendor)
    uses: Checkmarx/ast-github-action@main
    with:
      project_name: <project_name>
      cx_tenant: <cx_tenant>
      base_uri: <url>
      cx_client_id: <cx_client_id>
      cx_client_secret: <cx_client_secret>
      scan_params: |
        --scan-types sast
        --sast-preset-name <preset>
        --sast-filter <filters>
        --debug
        --report-format sarif
        --output-path .

[cx-umesh-waghode]

@cmotsn @mloebens For PR decoration, define utils_params variable to pass --code-repository-url.

[mloebens]

Works now, thanks!