Gitleaks Action failing : Invalid Licence

[souro1212]

The GitLeaks GitHub Action is failing due to an "Invalid License" error, preventing the security scan from running. I am facing the same issue across multiple organisations.(Each org has unique licence ).
Details:

PR: https://github.com/DevSecOps-AppSec/testrepo-reusable-workflow/actions/runs/11306937684/job/31448090343?pr=1

Error: Validating key returned [{"meta":{"id":"7e37c504-0d77-42b2-ba84-ae767f8a59b7"},"errors":[{"title":"Account does not have an active subscription","detail":"must have an active subscription to access this resource"}]}]

Impact: Security scans are blocked across multiple organisations.

[capillary-chandana]

Even I'm also facing the same issue across multiple organisations.

[zricethezav]

@souro1212 @capillary-chandana should be fixed now if you're pinned to v2 or latest. The license distributor software I'm using is declining my payment so I've disabled the check in code for now. Sorry for the inconvenience. Lemme know if your issue isn't fixed and I'll reopen this issue.

[souro1212]

Now it's showing API limit reached. 😓

[zricethezav]

@souro1212 you're using an old version, please update to the latest v2.3.7 or pin to v2. Keygen validation won't work unless the payment method is accepted, which it ain't 🤷🏻‍♂️

[souro1212]

Yup my bad, checked with a fresh PR. It's working now. Thanks a lot 😊

[zricethezav]

Gonna leave this open for a little longer for visibility actually

[cristianmagana]

Anyway I can get a pending license approved?

[zricethezav]

@cristianmagana technically you dont need a license anymore since I ripped out the license check (for the time being)

[gelocraft]

@cristianmagana technically you dont need a license anymore since I ripped out the license check (for the time being)

@zricethezav i think there's a bug with your license check logic, because i still get a non-zero exit code when ${{ secrets.GITLEAKS_LICENSE }} was not set.

[gelocraft]

I will make an update in readme removing all the GITLEAKS_LICENSE from the docs because it is no longer required when this pr #168 got merged

[souro1212]

@cristianmagana technically you dont need a license anymore since I ripped out the license check (for the time being)

@zricethezav i think there's a bug with your license check logic, because i still get a non-zero exit code when ${{ secrets.GITLEAKS_LICENSE }} was not set.

Just send a dummy license, it worked for me.

        uses: gitleaks/gitleaks-action@v2.3.7
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}  # Using GITHUB_TOKEN from GitHub
          GITLEAKS_LICENSE: "dummyLicense"  # Accessing the license