Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Error: Resource not accessible by integration #190

Closed
votemike opened this issue Oct 17, 2023 · 7 comments · Fixed by #257
Closed

Error: Resource not accessible by integration #190

votemike opened this issue Oct 17, 2023 · 7 comments · Fixed by #257
Labels
documentation Improvements or additions to documentation

Comments

@votemike
Copy link

I think this might be because the action requires certain permissions.
I can't find these documented.
It may be worth adding something about them.

@LouisBrunner
Copy link
Owner

Hi,

Are you referring to #35?

@remisture
Copy link

This happens for PRs created by Dependabot also.

@LouisBrunner
Copy link
Owner

Yes, this is due to the token having different permissions, did you check this issue linked in #35? actions/first-interaction#10 (comment)

@votemike
Copy link
Author

votemike commented Oct 18, 2023

I didn't spot that issue as it's closed.
But my PR is not coming from a fork. It's from a different branch in the same repo.
In any case, if permissions are required. Would it be worth documenting them?

@LouisBrunner
Copy link
Owner

Sure thing, feel free to open a PR to update the documentation.

@votemike
Copy link
Author

I still haven't quite figured out which permissions are required. I haven't got this working yet.
I'll see if I can find some time to try again and if I get it working, will add more docs.

@redwyre
Copy link

redwyre commented Dec 20, 2023

I added this at the top of my file:

permissions:
    checks: write
    contents: read

write permissions for checks as by default it's readonly, and contents set to read because when you set any permissions the rest default to none

I believe it is possible to make the token more permissible by default, but doing this instead is safer, and safer still would be to do it per-job for only the jobs that need it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
documentation Improvements or additions to documentation
Projects
None yet
Development

Successfully merging a pull request may close this issue.

4 participants