Skip to content

Commit b3fc98e

Browse files
committed
improve error handling for policy store sceanrio
1 parent 92fc5d4 commit b3fc98e

File tree

3 files changed

+16
-5
lines changed

3 files changed

+16
-5
lines changed

dist/pre/index.js

Lines changed: 8 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -88140,8 +88140,14 @@ var setup_awaiter = (undefined && undefined.__awaiter) || function (thisArg, _ar
8814088140
lib_core.setFailed('Policy store requires id-token write permission as it uses OIDC to fetch the policy from StepSecurity API. Please add "id-token: write" to your job permissions.');
8814188141
}
8814288142
else {
88143-
// Log other errors but don't fail the job
88144-
lib_core.error(`Failed to fetch policy: ${err}`);
88143+
// Handle different HTTP status codes
88144+
if (err.statusCode >= 400 && err.statusCode < 500) {
88145+
lib_core.error('Policy not found');
88146+
}
88147+
else {
88148+
lib_core.error(`Unexpected error occurred: ${err}. Falling back to egress policy audit`);
88149+
confg.egress_policy = 'audit';
88150+
}
8814588151
}
8814688152
}
8814788153
}

dist/pre/index.js.map

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

src/setup.ts

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -89,8 +89,13 @@ interface MonitorResponse {
8989
if (err.message && err.message.includes('Unable to get ACTIONS_ID_TOKEN_REQUEST')) {
9090
core.setFailed('Policy store requires id-token write permission as it uses OIDC to fetch the policy from StepSecurity API. Please add "id-token: write" to your job permissions.');
9191
} else {
92-
// Log other errors but don't fail the job
93-
core.error(`Failed to fetch policy: ${err}`);
92+
// Handle different HTTP status codes
93+
if (err.statusCode >= 400 && err.statusCode < 500) {
94+
core.error('Policy not found');
95+
} else {
96+
core.error(`Unexpected error occurred: ${err}. Falling back to egress policy audit`);
97+
confg.egress_policy = 'audit';
98+
}
9499
}
95100
}
96101
}

0 commit comments

Comments
 (0)