9sako6 / imgcmp Goto Github PK

When I have imgcmp run in a folder with a large number of images, it fails to create a new PR due to body limitations. One way to fix this issue may be not listing images in the PR that didn't have any changes to their size. Another way may be not listing images at all if there are too much.

Ref https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token

This is currently failing to create a new branch for me:

name: imgcmp

on:
  push:
    
jobs:
  build:
    name: Optimize images
    runs-on: ubuntu-latest

    permissions:
      contents: write
      pull-requests: write

    steps:
    - uses: 9sako6/[email protected]
      env:
        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Error:

Error getting current user: Forbidden (HTTP 403)
Resource not accessible by integration

HI! I am getting this error with version 2.0.1:

Checking the base repository state
  /usr/bin/git symbolic-ref HEAD --short
  api
  Working base is branch 'api'
  /usr/bin/git remote prune origin
  fatal: could not read Username for 'https://github.com/': No such device or address
  Error: The process '/usr/bin/git' failed with exit code 128

Any idea?

The action:

name: imgcmp

on:
  push:
    
jobs:
  build:
    name: Optimize images
    runs-on: ubuntu-latest
    permissions:
      contents: write
      pull-requests: write
    steps:
    -
      uses: actions/checkout@v3
    -
      uses: 9sako6/[email protected]
      env:
        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Hello,

I would like to report a security vulnerability in private, I was not able to find a security contact for this repository and there is no security policy and private reporting is disabled as well. What would be a good contact to reach out to? Or would you be open to enabling private vulnerability reporting for the repository?

e.g.:

name: imgcmp
on: pull_request
jobs:
  build:
    name: imgcmp
    runs-on: ubuntu-latest    
    steps:
    - uses: 9sako6/imgcmp@master
      env:
        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        IGNORED_FILES: "public/*:posts/*.svg"
        JPEG_QUALITY: 60

"there is no imagefiles" appears if there is an image in repository.

Hello!

I hope you are doing well!

We are a security research team. Our tool automatically detected a vulnerability in this repository. We want to disclose it responsibly. GitHub has a feature called Private vulnerability reporting, which enables security research to privately disclose a vulnerability. Unfortunately, it is not enabled for this repository.

Can you enable it, so that we can report it?

Thanks in advance!

PS: you can read about how to enable private vulnerability reporting here: https://docs.github.com/en/code-security/security-advisories/repository-security-advisories/configuring-private-vulnerability-reporting-for-a-repository

be able to set how much compression threshold