-
Notifications
You must be signed in to change notification settings - Fork 92
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
(README.md) Personal access tokens for public user projects #51
Comments
Hey @j1elo thanks for the detailed issue! Do you want to make a PR to update it? Would be happy to make this change. |
I wouldn't have enough knowledge about how to work with the GraphQL queries and Github permissions to know how to avoid that the Otherwise, yes I can propose a change to the README. |
This action was failing with ``` Resource not accessible by integration ``` I think this relates to [this issue](alex-page/github-project-automation-plus#51) so I'm replacing the default, automatically-provided `GITHUB_TOKEN` secret with a personal access token (PAC) belonging to the `cloud-platform-moj github bot account (which I have added to the `operations-engineering` github team). This token has `repo` scope, and has been enabled for MoJ SSO, and added to this repo as the secret `CLOUD_PLATFORM_MOJ_GITHUB_TOKEN` I'm hoping this will enable this action to work as it's supposed to.
Per alex-page/github-project-automation-plus#51, the `GITHUB_TOKEN` secret doesn't have the appropriate permissions to manage the issue workflows at a repo level. Reverting to the previous secret to get the workflows working again. Signed-off-by: Nolan Brubaker <[email protected]>
Per alex-page/github-project-automation-plus#51, the `GITHUB_TOKEN` secret doesn't have the appropriate permissions to manage the issue workflows at a repo level. Reverting to the previous secret to get the workflows working again. Signed-off-by: Nolan Brubaker <[email protected]>
Per alex-page/github-project-automation-plus#51, the `GITHUB_TOKEN` secret doesn't have the appropriate permissions to manage the issue workflows at a repo level. Reverting to the previous secret to get the workflows working again. Signed-off-by: Nolan Brubaker <[email protected]>
Per alex-page/github-project-automation-plus#51, the `GITHUB_TOKEN` secret doesn't have the appropriate permissions to manage the issue workflows at a repo level. Reverting to the previous secret to get the workflows working again. Signed-off-by: Nolan Brubaker <[email protected]>
Per alex-page/github-project-automation-plus#51, the `GITHUB_TOKEN` secret doesn't have the appropriate permissions to manage the issue workflows at a repo level. Reverting to the previous secret to get the workflows working again. Signed-off-by: Nolan Brubaker <[email protected]>
So is the proper solution to have a token with whole |
@D4nte yes so it can access issues and pull requests. Are you having issues with this? |
Now fixed. Thanks! |
@j1elo I have updated the documentation. Closing this issue for now but please re-open it if anything is missing. |
Per alex-page/github-project-automation-plus#51, the `GITHUB_TOKEN` secret doesn't have the appropriate permissions to manage the issue workflows at a repo level. Reverting to the previous secret to get the workflows working again. Signed-off-by: Nolan Brubaker <[email protected]>
Per alex-page/github-project-automation-plus#51, the `GITHUB_TOKEN` secret doesn't have the appropriate permissions to manage the issue workflows at a repo level. Reverting to the previous secret to get the workflows working again. Signed-off-by: Nolan Brubaker <[email protected]>
Per alex-page/github-project-automation-plus#51, the `GITHUB_TOKEN` secret doesn't have the appropriate permissions to manage the issue workflows at a repo level. Reverting to the previous secret to get the workflows working again. Signed-off-by: Nolan Brubaker <[email protected]>
The README says that for
the required permission is
repo
("Full control of private repositories").However, this permission is actually required also for public repositories and project boards.
I've tested it with a public user-level Project: https://github.com/users/j1elo/projects/1
and a public repository: https://github.com/j1elo/test-repo
secrets.GITHUB_TOKEN
fails with errorResource not accessible by integration
(e.g. https://github.com/j1elo/test-repo/actions/runs/274046708)write:org
("Read and write org and team membership, read and write org projects") causes an empty GraphQL response and the errorCould not find the column "..." or project "..."
(e.g. https://github.com/j1elo/test-repo/actions/runs/274113617) -- I tried this one just to test if user-level Projects had the same permissions as Organization Projectsrepo
sub-scopes (repo:status
,repo_deployment
,public_repo
,repo:invite
,security_events
), and it also causes an empty query response.repo
allowed the query to find the requested Project.Proposed fix:
Either the README should be updated to reflect that
repo
is needed also for public user Projects and public repos; or else, if possible at all, the query should be made in a way that doesn't require fullrepo
permissions just to search for existing Projects.In any case, thank you very much for this action! :-)
The text was updated successfully, but these errors were encountered: