DevSkim Action Failing Due to .NET Version Mismatch

[Light-Leo]

Description:

The DevSkim-Action GitHub Action has started failing unexpectedly in our workflows due to a .NET version mismatch in the Docker build process. The action has not been updated in 10+ months, but something seems to have changed, causing a breaking issue.

Steps to Reproduce:

• Use the latest DevSkim-Action in a GitHub Actions workflow.
• The action attempts to build its Docker image using .NET SDK 7.0.
• The build fails when trying to install Microsoft.CST.DevSkim.CLI, as the latest version (1.0.52) only supports .NET 8.0+.

Observed Behavior:

The following error occurs during the Docker build:

error NU1202: Package Microsoft.CST.DevSkim.CLI 1.0.52 is not compatible with net7.0 (.NETCoreApp,Version=v7.0) / any.
Package Microsoft.CST.DevSkim.CLI 1.0.52 supports:
  - net8.0 (.NETCoreApp,Version=v8.0) / any
  - net9.0 (.NETCoreApp,Version=v9.0) / any

Can this action be updated to support .NET 8.0+, or is there a recommended workaround from the maintainers?

Thanks!

[joschi]

Probably caused by microsoft/DevSkim#678.

Interesting doing such a breaking change in a patch release. 🙈

[gfs]

Doh, thanks, I'll get that fixed ASAP. #31

[gfs]

Probably caused by microsoft/DevSkim#678.

Interesting doing such a breaking change in a patch release. 🙈

That's a fair point, and sorry for the inconvenience. I didn't take into account the impact of the framework change to the Action which always pulls the latest DevSkim.

This was considered a patch level release of DevSkim because it has no breaking functionality changes for the program itself, but the framework migration could be considered a breaking change (and was in this case for the action). I'll try to keep that in mind for migrating to .NET 10 this November.

[gfs]

Should be resolved now, again sorry for the inconvenience, I'll try to have a better experience for future framework migrations.