Permission denied writing report

[Sebastian Bahler]

Hi, I'm using zaproxy/action-...@v0.5.0 as follow as part of my test workflow on github

- name: Run ZAP API Scan
  uses: zaproxy/action-...@v0.5.0
  with:
    target: openapi-docs.json
    format: openapi

And I get

/usr/bin/touch report_json.json report_md.md report_html.html
/usr/bin/touch: cannot touch 'report_json.json': Permission denied
/usr/bin/touch: cannot touch 'report_md.md': Permission denied
/usr/bin/touch: cannot touch 'report_html.html': Permission denied
Error: The process '/usr/bin/touch' failed with exit code 1

Here is the full output for the zap scan step

Run zaproxy/action-...@v0.5.0
  with:
    target: openapi-docs.json
    format: openapi
    token: ***
    docker_name: ghcr.io/zaproxy/zaproxy:stable
    issue_title: ZAP API Scan Report
    fail_action: false
    allow_issue_writing: true
    artifact_name: zap_scan
  env:
    ZAP_AUTH_HEADER: Authorization
    ZAP_AUTH_HEADER_VALUE: ***
starting the program
github run id :11636495418
/usr/bin/touch report_json.json report_md.md report_html.html
/usr/bin/touch: cannot touch 'report_json.json': Permission denied
/usr/bin/touch: cannot touch 'report_md.md': Permission denied
/usr/bin/touch: cannot touch 'report_html.html': Permission denied
Error: The process '/usr/bin/touch' failed with exit code 1

Thanks!

[thc...@gmail.com]

Hi,

It might make no difference but I'd suggest first update to latest
version of the action.

Best regards.

[Sebastian Bahler]

Thank you very much, updating the version to the latest, fixed the issue.

I'm facing another issue now but I'll start a new thread

Thanks again!

[Simon Bennetts]

Thanks for letting us know!