Skip to content
This repository was archived by the owner on Jul 23, 2025. It is now read-only.

GPG signature timeout on retrieval on self-hosted runner #801

@iconicaladb

Description

@iconicaladb

Describe the bug
This is the same issue as #656 and #690 however I've narrowed this down to failing on self-hosted runners but working on GitHub-hosted runners.

When run on the GitHub-hosted runners (ubuntu-latest), the following debug logs show a successful run:

##[debug]ℹ️ Verifying environment...
##[debug]✅ Environment verification completed...
##[debug]ℹ️ Downloading CC Reporter from https://codeclimate.com/downloads/test-reporter/test-reporter-latest-linux-amd64 ...
##[debug]✅ CC Reporter downloaded...
##[debug]ℹ️ Verifying CC Reporter checksum...
##[debug]✅ CC Reported checksum verification completed...
##[debug]ℹ️ Verifying CC Reporter GPG signature...
##[debug]✅ CC Reported GPG signature verification completed...

When run on self-hosted runners, the following debug logs show the binary is downloaded successfully but not the subsequent PGP public key (the timeout is instantaneous, and the step completes in 3s):

##[debug]ℹ️ Verifying environment...
##[debug]✅ Environment verification completed...
##[debug]ℹ️ Downloading CC Reporter from https://codeclimate.com/downloads/test-reporter/test-reporter-latest-linux-amd64 ...
##[debug]✅ CC Reporter downloaded...
##[debug]ℹ️ Verifying CC Reporter checksum...
##[debug]✅ CC Reported checksum verification completed...
##[debug]ℹ️ Verifying CC Reporter GPG signature...
Error: request to https://keys.openpgp.org/vks/v1/by-fingerprint/9BD9E2DD46DA965A537E5B0A5CBF3202[43](https://github.com/<org>/<repo>/actions/runs/14752751098/job/41413787093#step:7:44)B6FD85 failed, reason: 
Error: 🚨 CC Reporter GPG signature verfication failed!
file:///runner/_work/_actions/paambaati/codeclimate-action/v9.0.0/node_modules/node-fetch/src/index.js:108
			reject(new FetchError(`request to ${request.url} failed, reason: ${error.message}`, 'system', error));
			       ^

FetchError: request to https://keys.openpgp.org/vks/v1/by-fingerprint/9BD9E2DD[46](https://github.com/<org>/<repo>/actions/runs/14752751098/job/41413787093#step:7:47)DA965A537E5B0A5CBF320243B6FD85 failed, reason: 
    at ClientRequest.<anonymous> (file:///runner/_work/_actions/paambaati/codeclimate-action/v9.0.0/node_modules/node-fetch/src/index.js:108:11)
    at ClientRequest.emit (node:events:524:28)
    at emitErrorEvent (node:_http_client:101:11)
    at TLSSocket.socketErrorListener (node:_http_client:[50](https://github.com/<org>/<repo>/actions/runs/14752751098/job/41413787093#step:7:51)4:5)
    at TLSSocket.emit (node:events:[52](https://github.com/<org>/<repo>/actions/runs/14752751098/job/41413787093#step:7:53)4:28)
    at emitErrorNT (node:internal/streams/destroy:169:8)
    at emitErrorCloseNT (node:internal/streams/destroy:128:3)
    at process.processTicksAndRejections (node:internal/process/task_queues:82:21) {
  type: 'system',
  errno: 'ETIMEDOUT',
  code: 'ETIMEDOUT',
  erroredSysCall: undefined
}

Node.js v20.19.0

Both run the following action:

    - name: Execute tests and coverage
      uses: paambaati/[email protected]
      env:
        CC_TEST_REPORTER_ID: ${{ env.CC_TEST_REPORTER_ID }}
      with:
        coverageCommand: pipenv run pytest --junit-xml=myapp-test-results.xml --cov=myapp --cov-report term-missing --cov-report xml tests

execing into the running self-hosted container and running curl works successfully so connectivity to keys.openpgp.org is fine.

Version of codeclimate-action you're using
v9.0.0

Example links

  1. Configure your job to include the debug: true flag and the ACTIONS_STEP_DEBUG secret to true so I can get additional debugging information.
  2. Include links to the specific Github action run and your config.

Expected behavior
A clear and concise description of what you expected to happen.

Additional context
Add any other context about the problem here.

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions