Replies: 1 comment
-
|
@nv35 Can you try with the UBI images which are configured to run KICS as non-root ? See https://github.com/Checkmarx/kics/blob/master/docs/getting-started.md |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Hi, KICS with Checkmarx/kics-github-action can't run on my self-hosted runner, that is running under a non-root user on the linux server, after the second pipeline execution on the same repo.
My pipeline is a standard one
kics-scan: runs-on: [ ec2 ] steps: - uses: actions/checkout@v2 # Scan Iac with kics - name: run kics Scan uses: Checkmarx/action-kics@4988213 with: path: 'iaac' output_path: kics-results/ # Display the results in json format - name: display kics results run: | cat kics-results/results.jsonIt fails because it can't delete the result of the previous scan run.
The folder belongs to root instead of the user that runs github action:
I guess the KICS docker image runs as root user inside the container, resulting in files created on the host as root instead of correct user. Then, in next pipeline run, github actions runner can't cleanup the repo.
This is basically the same issue that i've described at SonarSource/sonarqube-scan-action/issues/27. See also the solution that was provided, that allows resetting output folder permission. See also #4057.
Is there any known solution or should I create an issue?
Beta Was this translation helpful? Give feedback.
All reactions