[BUG] Action is fialing with graphql error

[rokups]

CLA workflow fails with a following error:

Error: graphql call to get the committers details failed: GraphqlError: Resource not accessible by integration

My workflow file:

name: "CLA Assistant"
on:
  issue_comment:
    types: [created]
  pull_request_target:
    types: [opened,closed,synchronize]

jobs:
  CLAAssistant:
    runs-on: ubuntu-latest
    steps:
      - name: "CLA Assistant"
        if: (github.event.comment.body == 'recheck' || github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA') || github.event_name == 'pull_request_target'
        uses: contributor-assistant/[email protected]
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          PERSONAL_ACCESS_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
        with:
          path-to-signatures: '.github/signatures/version1/cla.json'
          path-to-document: 'https://github.com/rokups/charting_app/blob/master/.github/CLA.md'
          branch: 'master'
          allowlist: rokups
          lock-pullrequest-aftermerge: false

I did try with and without PERSONAL_ACCESS_TOKEN. Repository is private.

[ibakshay]

Hi @rokups,
I will look into your issue today and will keep you posted :)

[ibakshay]

Hi @rokups,
Looks like you have configured Github Actions workflow permissions in your private repository to "read repository contents and packages permissions". So then, you need to manually specify permissions in the CLA workflow file like below.

Feel free to create a PR and mention about adding this permission explicitly in this repository's README if the below workflow file works for you :)

name: "CLA Assistant"
on:
  issue_comment:
    types: [created]
  pull_request_target:
    types: [opened,closed,synchronize]

permissions:
  actions: write
  contents: write
  pull-requests: write
  statuses: write

jobs:
  CLAAssistant:
    runs-on: ubuntu-latest
    steps:
      - name: "CLA Assistant"
        if: (github.event.comment.body == 'recheck' || github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA') || github.event_name == 'pull_request_target'
        uses: contributor-assistant/[email protected]
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          PERSONAL_ACCESS_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
        with:
          path-to-signatures: '.github/signatures/version1/cla.json'
          path-to-document: 'https://github.com/rokups/charting_app/blob/master/.github/CLA.md'
          branch: 'master'
          allowlist: rokups
          lock-pullrequest-aftermerge: false

For more information, please refer this link

[rokups]

Thank you, it worked perfectly. I do not recall changing this option, must be a default i suppose? In any case, issue is solved.

[ibakshay]

@rokups
Great! Default is read and write permissions.