Steps fails with timeout error

[iliyan-velichkov]

From time to time our workflows are failing with timeouts.

Could you please increase this timeout or add a timeout configuration.

Note: that the generated SARIF file has size of 812 KB

[iliyan-velichkov]

@peter-murray could you please check this issue?

[iliyan-velichkov]

@peter-murray any updates?

[iliyan-velichkov]

@peter-murray do you support this action?

[peter-murray]

Hi, sorry been busy with work and travel around that.

I started rewriting this action back when I was still at GitHub, but it was not published from the advanced-security organisation as there was further refactoring work that we had determined to be built out. This repository did not get any of the improvements and changes from that work as it was a complete rewrite of the use of the underlying APIs to solve a lot of issues that this action now has, which is using old patterns and out of date APIs for some of the data.

I don't use this action but there was some work not the vnext branch of it to remedy a lot of the issues around timeouts and API issues. Have you tried using that branch?

I probably would not be looking to maintain this repository as the improved code base is still a private repository in the advanced-security repository. If I was able to gain access to that prior work then I would consider porting it back into this repository and action, but that would require GitHub to decide to hand it back or to open source the incomplete work that I did whilst there. Something maybe @NickLiffen might be able to communicate/decide upon?

[NickLiffen]

👋 https://github.com/advanced-security/security-report-action, should be open source now 🙇

This is early access code and is not ready for production use! There will not be a release of this to the GitHub Actions Marketplace until the v1.0.0 version. The main branch is where active changes are being made and should be considered a moving target until v1.0.0.

As this is in the README, I think it's suitable 👍

Not saying you need to do anything with this @peter-murray, I know you're busy in the new gig (and hopefully enjoying ❤) but the option is there 🙇 ❤