Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Workflows triggered by Dependabot PRs will run with read-only permissions #233

Closed
AnimMouse opened this issue Mar 28, 2021 · 7 comments
Closed

Workflows triggered by Dependabot PRs will run with read-only permissions #233

AnimMouse opened this issue Mar 28, 2021 · 7 comments
Labels
bug Something isn't working

Comments

@AnimMouse
Copy link
Owner

AnimMouse commented Mar 28, 2021 •
edited
Loading

Create release is failing on pull requests that creates pre-releases.
Error: Resource not accessible by integration

Update: Resource not accessible by integration is not caused by create-release getting unmaintained by itself, it is caused by GitHub Actions: Workflows triggered by Dependabot PRs will run with read-only permissions. The problem still exist even in maintained actions.
@AnimMouse
Copy link
Owner Author

actions/create-release is now unmaintained.
Will need to use either of these:

@AnimMouse
Copy link
Owner Author

upload-release-asset is also unmaintained.
Will need to use either of these:

@AnimMouse
Copy link
Owner Author

Thanks softprops/action-gh-release @ 900259e.

@AnimMouse
Copy link
Owner Author

actions/create-release#119
actions/upload-release-asset#78

@AnimMouse AnimMouse added the upstream bug A problem upstream label Apr 4, 2021
@AnimMouse
Copy link
Owner Author

Update: Resource not accessible by integration is not caused by create-release getting unmaintained by itself, it is caused by GitHub Actions: Workflows triggered by Dependabot PRs will run with read-only permissions. The problem still exist even in maintained actions.

@AnimMouse AnimMouse reopened this Apr 10, 2021
@AnimMouse AnimMouse changed the title Create release: Resource not accessible by integration Workflows triggered by Dependabot PRs will run with read-only permissions Apr 10, 2021
@AnimMouse AnimMouse added bug Something isn't working and removed upstream bug A problem upstream labels Apr 10, 2021
@AnimMouse
Copy link
Owner Author

Fix implemented at 6c49b7a by using pull_request_target.

@AnimMouse
Copy link
Owner Author

Confirmed working.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug Something isn't working
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@AnimMouse