fortify/gha-setup-scancentral-client

Unable to locate zip from actions workflow.

Closed this issue · 2 comments

We have the following snippet in our workflow as per your documentation:

fortify-sast:
  name: Fortify SAST Scan
  needs: build
  runs-on: self-hosted
  steps:
    - name: Fortify ScanCentral Scan
      uses: fortify/gha-setup-scancentral-client@v1.2.0

We are receiving an error on the run of the job:
Unable to locate executable file: unzip. Please verify either the file path exists or the file can be found within a directory specified by the PATH environment variable. Also check the file mode to verify the file is executable.

The gha-setup-scancentral-client action uses the GitHub-provided tool-cache package to download and extract the actual client. I don't see any documented requirements for this package, but apparently on Linux-based runners it requires unzip to be installed.

I guess unzip is installed by default on GitHub-hosted runners, but not on your self-hosted runner. So, in order to use the gha-setup-scancentral-client action, you will need to install the unzip utility on your self-hosted runner.

Alternatively you can also install the ScanCentral Client on your self-hosted runner directly, instead of using the gha-setup-scancentral-client action to install the client on-the-fly while running your workflow.

Thanks for the response. That helped immensely!