trivy-action 0.28.0 Retrieving the default branch name Not Found

[ABobrovskikh-bhs]

Description

Good morning. Could you help me please.
We upgraded trivy-action to 0.28.0
And now get error:

Determining the default branch
Retrieving the default branch name
Not Found

Desired Behavior

the git origin should be "github.com" I think

Actual Behavior

We use it in our Github Enterprise Server
By the logs I see that it tries to set our Github Enterprise Server as the git origin instead of github.com

Initializing the repository
...
Initialized empty Git repository in /home/runner/_work/ghes-functions-dev/ghes-functions-dev/trivy/.git/
/usr/bin/git remote add origin https://"OUR Github Enterprise Server FQDN"/aquasecurity/trivy

Reproduction Steps

Run this job on the Github Enterprise Server 3.13.4

jobs:
  tfsec:
    name: Run Trivy Analysis
    runs-on: ubuntu-latest
    permissions:
      actions: read
      contents: read
      security-events: write

    steps:
      - name: Clone repo
        uses: actions/checkout@v4

      - name: Run Trivy vulnerability scanner in IaC mode
        uses: aquasecurity/[email protected]
        with:
          scan-type: 'config'
          hide-progress: false
          format: 'table'
          exit-code: '1'
          ignore-unfixed: true
          severity: 'CRITICAL,HIGH'

Target

Git Repository

Scanner

Vulnerability

Output Format

Table

Mode

Standalone

Debug Output

Run aquasecurity/[email protected]
  with:
    scan-type: config
    hide-progress: false
    format: table
    exit-code: 1
    ignore-unfixed: true
    severity: CRITICAL,HIGH
    version: v0.56.2
    scan-ref: .
    vuln-type: os,library
    cache-dir: /home/runner/_work/ghes-functions-dev/ghes-functions-dev/.cache/trivy
    list-all-pkgs: false
    cache: true

Run aquasecurity/[email protected]
  with:
    version: v0.56.2
    cache: true
    path: $HOME/.local/bin

Run echo "dir=$HOME/.local/bin/trivy-bin" >> $GITHUB_OUTPUT
  echo "dir=$HOME/.local/bin/trivy-bin" >> $GITHUB_OUTPUT
  shell: /usr/bin/bash --noprofile --norc -e -o pipefail {0}

Run actions/cache@v4
  with:
    path: /home/runner/.local/bin/trivy-bin
    key: trivy-binary-v0.56.2-Linux-X64
    enableCrossOsArchive: false
    fail-on-cache-miss: false
    lookup-only: false
    save-always: false
Cache not found for input keys: trivy-binary-v0.56.2-Linux-X64

Run actions/checkout@v4
  with:
    repository: aquasecurity/trivy
    sparse-checkout: contrib/install.sh
  
    sparse-checkout-cone-mode: false
    path: trivy
    fetch-depth: 1
    token: ***
    ssh-strict: true
    ssh-user: git
    persist-credentials: true
    clean: true
    fetch-tags: false
    show-progress: true
    lfs: false
    submodules: false
    set-safe-directory: true
Syncing repository: aquasecurity/trivy

Getting Git version info
  Working directory is '/home/runner/_work/ghes-functions-dev/ghes-functions-dev/trivy'
  /usr/bin/git version
  git version 2.46.1
Temporarily overriding HOME='/home/runner/_work/_temp/f2537bb6-627d-4642-a33e-b3d4c00fe018' before making global git config changes
Adding repository directory to the temporary git global config as a safe directory
/usr/bin/git config --global --add safe.directory /home/runner/_work/ghes-functions-dev/ghes-functions-dev/trivy

Initializing the repository
  /usr/bin/git init /home/runner/_work/ghes-functions-dev/ghes-functions-dev/trivy
  hint: Using 'master' as the name for the initial branch. This default branch name
  hint: is subject to change. To configure the initial branch name to use in all
  hint: of your new repositories, which will suppress this warning, call:
  hint:
  hint: 	git config --global init.defaultBranch <name>
  hint:
  hint: Names commonly chosen instead of 'master' are 'main', 'trunk' and
  hint: 'development'. The just-created branch can be renamed via this command:
  hint:
  hint: 	git branch -m <name>
  Initialized empty Git repository in /home/runner/_work/ghes-functions-dev/ghes-functions-dev/trivy/.git/
  /usr/bin/git remote add origin https://<our Github Enterprise Server FQDN>/aquasecurity/trivy

Disabling automatic garbage collection
  /usr/bin/git config --local gc.auto 0

Setting up auth
  /usr/bin/git config --local --name-only --get-regexp core\.sshCommand
  /usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'core\.sshCommand' && git config --local --unset-all 'core.sshCommand' || :"
  /usr/bin/git config --local --name-only --get-regexp http\.https\:\/\/<our Github Enterprise Server FQDN>\/\.extraheader
  /usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'http\.https\:\/\/<our Github Enterprise Server FQDN>\/\.extraheader' && git config --local --unset-all 'http.https://<our Github Enterprise Server FQDN>/.extraheader' || :"
  /usr/bin/git config --local http.https://<our Github Enterprise Server FQDN>/.extraheader AUTHORIZATION: basic ***

Determining the default branch
  Retrieving the default branch name
  Not Found - https://docs.github.com/[email protected]/rest/repos/repos#get-a-repository
  Waiting 19 seconds before trying again
  Retrieving the default branch name
  Not Found - https://docs.github.com/[email protected]/rest/repos/repos#get-a-repository
  Waiting 11 seconds before trying again
  Retrieving the default branch name
  Error: Not Found - https://docs.github.com/[email protected]/rest/repos/repos#get-a-repository

Operating System

Ubuntu

Version

0.56.2

Checklist

• Run trivy clean --all
• Read the troubleshooting

[simar7]

Please track aquasecurity/trivy-action#418