Fix: Zusätzliche Prüfung auf leere Umgebungsvariablen in report-security-issue.py

This commit is contained in:
2026-09-10 23:21:29 +02:00
parent e85c613e7d
commit 9c14d965db
+5 -4
View File
@@ -253,8 +253,8 @@ def main():
osv_path = sys.argv[2] if len(sys.argv) > 2 else None osv_path = sys.argv[2] if len(sys.argv) > 2 else None
trufflehog_path = sys.argv[3] if len(sys.argv) > 3 else None trufflehog_path = sys.argv[3] if len(sys.argv) > 3 else None
gitea_url = os.environ.get("GITEA_URL", "").rstrip("/") gitea_url = os.environ.get("GITEA_URL", "").strip().rstrip("/")
repo = os.environ.get("REPO", "") repo = os.environ.get("REPO", "").strip()
token = os.environ.get("TOKEN", "").strip() token = os.environ.get("TOKEN", "").strip()
run_url = os.environ.get("RUN_URL", "") run_url = os.environ.get("RUN_URL", "")
osv_exit = int(os.environ.get("OSV_EXIT", "0")) osv_exit = int(os.environ.get("OSV_EXIT", "0"))
@@ -263,8 +263,9 @@ def main():
findings = sort_findings(load_trivy(trivy_path) + load_osv(osv_path) + load_trufflehog(trufflehog_path)) findings = sort_findings(load_trivy(trivy_path) + load_osv(osv_path) + load_trufflehog(trufflehog_path))
print_summary(findings) print_summary(findings)
if not token: if not token or not gitea_url or not repo:
print("TOKEN nicht gesetzt oder leer überspringe Gitea-Issue-Synchronisation.") missing = [name for name, val in [("TOKEN", token), ("GITEA_URL", gitea_url), ("REPO", repo)] if not val]
print(f"{', '.join(missing)} nicht gesetzt oder leer überspringe Gitea-Issue-Synchronisation.")
else: else:
open_issue = find_open_issue(token, gitea_url, repo) open_issue = find_open_issue(token, gitea_url, repo)