HTTP Response 403 when downloading gitleaks

[tarunkant]

Hello, I am encountering this issue:

Run gitleaks/gitleaks-action@v2
[XXXXXXX] is an organization. License key is required.
gitleaks version: 8.24.3
Version to install: 8.24.3 (target directory: /tmp/gitleaks-8.24.3)
Downloading gitleaks from https://github.com/zricethezav/gitleaks/releases/download/v8.24.3/gitleaks_8.24.3_linux_x64.tar.gz
Error: could not install gitleaks from https://github.com/zricethezav/gitleaks/releases/download/v8.24.3/gitleaks_8.24.3_linux_x64.tar.gz, error: Error: Unexpected HTTP response: 403
/home/runner/_work/_actions/gitleaks/gitleaks-action/v2/dist/index.js:13528
            throw new Error("parameter 'file' is required");
                  ^

Error: parameter 'file' is required
    at Object.<anonymous> (/home/runner/_work/_actions/gitleaks/gitleaks-action/v2/dist/index.js:13528:19)
    at Generator.next (<anonymous>)
    at /home/runner/_work/_actions/gitleaks/gitleaks-action/v2/dist/index.js:13327:71
    at new Promise (<anonymous>)
    at __webpack_modules__.27784.__awaiter (/home/runner/_work/_actions/gitleaks/gitleaks-action/v2/dist/index.js:13323:12)
    at Object.extractTar (/home/runner/_work/_actions/gitleaks/gitleaks-action/v2/dist/index.js:13526:12)
    at Object.Install (/home/runner/_work/_actions/gitleaks/gitleaks-action/v2/dist/index.js:129467:16)
    at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
    at async start (/home/runner/_work/_actions/gitleaks/gitleaks-action/v2/dist/index.js:140730:22)

This issue is coming very frequently; however, if you re-run the failed job or close and re-open the PR, this issue gets resolved.

The workflow is simple:

      - name: Run GitLeaks Actions
        id: rungitleaks
        uses: gitleaks/gitleaks-action@v2
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE}} 
          GITLEAKS_ENABLE_UPLOAD_ARTIFACT: false

cc/ @zricethezav @paulschuberth

[tarunkant]

I think a few fixes should be considered:

• Retries if download fails

    try {
      downloadPath = await tc.downloadTool(
        gitleaksReleaseURL,
        path.join(os.tmpdir(), `gitleaks.tmp`)
      );
    } catch (error) {
      core.error(
        `could not install gitleaks from ${gitleaksReleaseURL}, error: ${error}`
      );
    }

• Update the path to gitleaks now: https://github.com/gitleaks/gitleaks/releases/download

function downloadURL(platform, arch, version) {
  const baseURL = "https://github.com/zricethezav/gitleaks/releases/download";
  if (platform == "win32") {
    platform = "windows";
  }
  return `${baseURL}/v${version}/gitleaks_${version}_${platform}_${arch}.tar.gz`;
}

• Update the owner?

async function Latest(octokit) {
  // docs: https://octokit.github.io/rest.js/v18#repos-get-latest-release
  const latest = await octokit.rest.repos.getLatestRelease({
    owner: "zricethezav",
    repo: "gitleaks",
  });

[tarunkant]

Any update here? @zricethezav @paulschuberth

[tarunkant]

Also, please pass the GITHUB_TOKEN when requesting to download the gitleaks binary, so that requests won't be rate-limited and instead will be treated as authenticated requests.