Dependabot looking for Action from Marketplace on local server only

[gilfthde]

Select Topic Area

Question

Body

Hello, I'm running a GitHub Enterprise server instance with GitHub Connect enabled to use whitelisted Actions from the marketplace. If I run Dependabot for the github-actions ecosystem in one of my repos it fails because it tries to resolve an Action from the marketplace as a local repository on the server (shimataro/ssh-key-action):

2023-03-15T10:15:12.0510057Z updater | Updating certificates in /etc/ssl/certs...
2023-03-15T10:15:12.3335756Z updater | rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
2023-03-15T10:15:12.3365321Z updater | 1 added, 0 removed; done.
2023-03-15T10:15:12.3366089Z Running hooks in /etc/ca-certificates/update.d...
2023-03-15T10:15:12.3370319Z updater | done.
2023-03-15T10:15:12.9141932Z updater | I, [2023-03-15T10:15:12.913499 #548]  INFO -- sentry: ** [Raven] Raven 3.1.2 configured not to capture errors: DSN not set
2023-03-15T10:15:13.1371931Z updater | To use retry middleware with Faraday v2.0+, install `faraday-retry` gem
2023-03-15T10:15:14.3834725Z updater | INFO <job_769> Starting job processing
2023-03-15T10:15:14.3835263Z INFO <job_769> Connectivity check starting
2023-03-15T10:15:34.6781068Z   proxy | 2023/03/15 10:15:34 [002] GET https://ghes.redacted.com:443/api/v3/repos/my-org/my-project
2023-03-15T10:15:34.6785085Z 2023/03/15 10:15:34 [002] * authenticating git server request (host: ghes.redacted.com)
2023-03-15T10:15:34.8021885Z   proxy | 2023/03/15 10:15:34 [002] 200 https://ghes.redacted.com:443/api/v3/repos/my-org/my-project
2023-03-15T10:15:34.8065479Z updater | INFO <job_769> Connectivity check successful
2023-03-15T10:15:54.8230917Z   proxy | 2023/03/15 10:15:54 [004] GET https://ghes.redacted.com:443/api/v3/repos/my-org/my-project
2023-03-15T10:15:54.8231939Z 2023/03/15 10:15:54 [004] * authenticating git server request (host: ghes.redacted.com)
2023-03-15T10:15:54.9369521Z   proxy | 2023/03/15 10:15:54 [004] 200 https://ghes.redacted.com:443/api/v3/repos/my-org/my-project
2023-03-15T10:15:54.9513144Z   proxy | 2023/03/15 10:15:54 [006] GET https://ghes.redacted.com:443/api/v3/repos/my-org/my-project/git/refs/heads/prd
2023-03-15T10:15:54.9516225Z 2023/03/15 10:15:54 [006] * authenticating git server request (host: ghes.redacted.com)
2023-03-15T10:15:55.0007803Z   proxy | 2023/03/15 10:15:55 [006] 200 https://ghes.redacted.com:443/api/v3/repos/my-org/my-project/git/refs/heads/prd
2023-03-15T10:15:55.0071338Z   proxy | 2023/03/15 10:15:55 [008] GET https://ghes.redacted.com:443/api/v3/repos/my-org/my-project/contents/?ref=df8a4d9bb6a7047bff80c98968629f9536031f75
2023-03-15T10:15:55.0072268Z 2023/03/15 10:15:55 [008] * authenticating git server request (host: ghes.redacted.com)
2023-03-15T10:15:55.0648225Z   proxy | 2023/03/15 10:15:55 [008] 200 https://ghes.redacted.com:443/api/v3/repos/my-org/my-project/contents/?ref=df8a4d9bb6a7047bff80c98968629f9536031f75
2023-03-15T10:15:55.0825328Z   proxy | 2023/03/15 10:15:55 [010] GET https://ghes.redacted.com:443/api/v3/repos/my-org/my-project/contents/.github/workflows?ref=df8a4d9bb6a7047bff80c98968629f9536031f75
2023-03-15T10:15:55.0826233Z 2023/03/15 10:15:55 [010] * authenticating git server request (host: ghes.redacted.com)
2023-03-15T10:15:55.1341283Z   proxy | 2023/03/15 10:15:55 [010] 200 https://ghes.redacted.com:443/api/v3/repos/my-org/my-project/contents/.github/workflows?ref=df8a4d9bb6a7047bff80c98968629f9536031f75
2023-03-15T10:15:55.1389743Z   proxy | 2023/03/15 10:15:55 [012] GET https://ghes.redacted.com:443/api/v3/repos/my-org/my-project/contents/.github/workflows/analyze.yml?ref=df8a4d9bb6a7047bff80c98968629f9536031f75
2023-03-15T10:15:55.1390393Z 2023/03/15 10:15:55 [012] * authenticating git server request (host: ghes.redacted.com)
2023-03-15T10:15:55.1975939Z   proxy | 2023/03/15 10:15:55 [012] 200 https://ghes.redacted.com:443/api/v3/repos/my-org/my-project/contents/.github/workflows/analyze.yml?ref=df8a4d9bb6a7047bff80c98968629f9536031f75
2023-03-15T10:15:55.2038257Z   proxy | 2023/03/15 10:15:55 [014] GET https://ghes.redacted.com:443/api/v3/repos/my-org/my-project/contents/.github/workflows/checks.yml?ref=df8a4d9bb6a7047bff80c98968629f9536031f75
2023-03-15T10:15:55.2039022Z 2023/03/15 10:15:55 [014] * authenticating git server request (host: ghes.redacted.com)
2023-03-15T10:15:55.2584430Z   proxy | 2023/03/15 10:15:55 [014] 200 https://ghes.redacted.com:443/api/v3/repos/my-org/my-project/contents/.github/workflows/checks.yml?ref=df8a4d9bb6a7047bff80c98968629f9536031f75
2023-03-15T10:15:55.2692081Z   proxy | 2023/03/15 10:15:55 [016] GET https://ghes.redacted.com:443/api/v3/repos/my-org/my-project/contents/.github/workflows/deploy.yml?ref=df8a4d9bb6a7047bff80c98968629f9536031f75
2023-03-15T10:15:55.2693263Z 2023/03/15 10:15:55 [016] * authenticating git server request (host: ghes.redacted.com)
2023-03-15T10:15:55.3304583Z   proxy | 2023/03/15 10:15:55 [016] 200 https://ghes.redacted.com:443/api/v3/repos/my-org/my-project/contents/.github/workflows/deploy.yml?ref=df8a4d9bb6a7047bff80c98968629f9536031f75
2023-03-15T10:15:55.3353452Z   proxy | 2023/03/15 10:15:55 [018] GET https://ghes.redacted.com:443/api/v3/repos/my-org/my-project/contents/.github/workflows/format_and_docs.yml?ref=df8a4d9bb6a7047bff80c98968629f9536031f75
2023-03-15T10:15:55.3354345Z 2023/03/15 10:15:55 [018] * authenticating git server request (host: ghes.redacted.com)
2023-03-15T10:15:55.3919637Z   proxy | 2023/03/15 10:15:55 [018] 200 https://ghes.redacted.com:443/api/v3/repos/my-org/my-project/contents/.github/workflows/format_and_docs.yml?ref=df8a4d9bb6a7047bff80c98968629f9536031f75
2023-03-15T10:15:55.3966832Z   proxy | 2023/03/15 10:15:55 [020] GET https://ghes.redacted.com:443/api/v3/repos/my-org/my-project/contents/.github/workflows/undeploy.yml?ref=df8a4d9bb6a7047bff80c98968629f9536031f75
2023-03-15T10:15:55.3967683Z 2023/03/15 10:15:55 [020] * authenticating git server request (host: ghes.redacted.com)
2023-03-15T10:15:55.4507283Z   proxy | 2023/03/15 10:15:55 [020] 200 https://ghes.redacted.com:443/api/v3/repos/my-org/my-project/contents/.github/workflows/undeploy.yml?ref=df8a4d9bb6a7047bff80c98968629f9536031f75
2023-03-15T10:15:55.4526723Z updater | INFO <job_769> Finished job processing
2023-03-15T10:15:56.8118190Z Cleaned up container 00586ab61024d5d2169f776ab7112df917b56e51f9f5b01131732897f0d01795
2023-03-15T10:15:56.8122267Z Running update job 769
2023-03-15T10:15:57.0438332Z Created update_files container: 38e6211bcf3f6151eefb1075d71bd6e4f1088333f0341c7b4efe38da60bcacac
2023-03-15T10:15:57.3837214Z updater | Updating certificates in /etc/ssl/certs...
2023-03-15T10:15:57.6252695Z updater | rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
2023-03-15T10:15:57.6272344Z updater | 1 added, 0 removed; done.
2023-03-15T10:15:57.6273111Z Running hooks in /etc/ca-certificates/update.d...
2023-03-15T10:15:57.6277848Z updater | done.
2023-03-15T10:15:58.2139772Z updater | I, [2023-03-15T10:15:58.213382 #546]  INFO -- sentry: ** [Raven] Raven 3.1.2 configured not to capture errors: DSN not set
2023-03-15T10:15:58.4451908Z updater | To use retry middleware with Faraday v2.0+, install `faraday-retry` gem
2023-03-15T10:15:59.6683331Z updater | INFO <job_769> Starting job processing
2023-03-15T10:15:59.6687041Z updater | INFO <job_769> Starting update job for my-org/my-project
2023-03-15T10:15:59.6847561Z   proxy | 2023/03/15 10:15:59 [022] GET https://ghes.redacted.com:443/shimataro/ssh-key-action.git/info/refs?service=git-upload-pack
2023-03-15T10:15:59.6848553Z   proxy | 2023/03/15 10:15:59 [022] * authenticating git server request (host: ghes.redacted.com)
2023-03-15T10:15:59.7147858Z   proxy | 2023/03/15 10:15:59 [022] 404 https://ghes.redacted.com:443/shimataro/ssh-key-action.git/info/refs?service=git-upload-pack
2023-03-15T10:15:59.7148649Z 2023/03/15 10:15:59 [022] * auth'd git request returned 404, retrying without auth
2023-03-15T10:15:59.7788786Z   proxy | 2023/03/15 10:15:59 [022] * de-auth'd request returned 401, replacing response
2023-03-15T10:15:59.8098268Z   proxy | 2023/03/15 10:15:59 [025] GET https://ghes.redacted.com:443/shimataro/ssh-key-action.git/info/refs?service=git-upload-pack
2023-03-15T10:15:59.8099140Z 2023/03/15 10:15:59 [025] * authenticating git server request (host: ghes.redacted.com)
2023-03-15T10:15:59.8381905Z   proxy | 2023/03/15 10:15:59 [025] 404 https://ghes.redacted.com:443/shimataro/ssh-key-action.git/info/refs?service=git-upload-pack
2023-03-15T10:15:59.8382753Z 2023/03/15 10:15:59 [025] * auth'd git request returned 404, retrying without auth
2023-03-15T10:15:59.9086732Z   proxy | 2023/03/15 10:15:59 [025] * de-auth'd request returned 401, replacing response
2023-03-15T10:16:19.9314095Z   proxy | 2023/03/15 10:16:19 [027] POST https://ghes.redacted.com:443/_dependabot/update_jobs/769/record_update_job_error
2023-03-15T10:16:20.0243310Z   proxy | 2023/03/15 10:16:20 [027] 204 https://ghes.redacted.com:443/_dependabot/update_jobs/769/record_update_job_error
2023-03-15T10:16:40.0500510Z   proxy | 2023/03/15 10:16:40 [029] PATCH https://ghes.redacted.com:443/_dependabot/update_jobs/769/mark_as_processed
2023-03-15T10:16:40.1488323Z   proxy | 2023/03/15 10:16:40 [029] 204 https://ghes.redacted.com:443/_dependabot/update_jobs/769/mark_as_processed
2023-03-15T10:16:40.1495142Z updater | INFO <job_769> Finished job processing
2023-03-15T10:16:40.1495792Z INFO Results:
2023-03-15T10:16:40.1496806Z Dependabot encountered '1' error(s) during execution, please check the logs for more details.
2023-03-15T10:16:41.1576692Z Failure running container 38e6211bcf3f6151eefb1075d71bd6e4f1088333f0341c7b4efe38da60bcacac
2023-03-15T10:16:41.1900690Z Cleaned up container 38e6211bcf3f6151eefb1075d71bd6e4f1088333f0341c7b4efe38da60bcacac
2023-03-15T10:16:42.3424001Z ##[error]Dependabot encountered an error performing the update

Error: The updater encountered one or more errors.

For more information see: https://ghes.redacted.com/my-org/my-project/network/updates/769 (write access required)
2023-03-15T10:16:42.3501329Z 🤖 ~ finished: error reported to Dependabot ~
2023-03-15T10:16:42.3530600Z ##[group]Run rm -rf "./dependabot-job-769-1678875203"
2023-03-15T10:16:42.3531073Z �[36;1mrm -rf "./dependabot-job-769-1678875203"�[0m

The dependabot.yml file is

version: 2
updates:
  - package-ecosystem: github-actions
    directory: /
    schedule:
      interval: daily

Is this a bug in Dependabot or a configuration issue on my side?

Thanks in advance,
TG

[Subharanjan2055]

Is it resolved?