argos icon indicating copy to clipboard operation
argos copied to clipboard

Intermittent error when using tokenless github auth

Open sidharthv96 opened this issue 8 months ago • 3 comments

It is exposing the token in the error log as well, potential security issue?

Error: GitHub job is not in progress (token: "tokenless-github-<removed-manually>")
    at throwAPIError (file:///__w/mermaid/mermaid/node_modules/.pnpm/@[email protected]/node_modules/@argos-ci/api-client/dist/index.js:30:9)

https://github.com/mermaid-js/mermaid/actions/runs/14327441158/job/40155655221

sidharthv96 avatar Apr 08 '25 10:04 sidharthv96

No it's not, the token is actually built with "public informations" so it's not a security issue.

gregberge avatar Apr 10 '25 11:04 gregberge

As indicated, the job seems not in progress when we receive the call. And that's weird because indeed it is?

gregberge avatar Apr 10 '25 11:04 gregberge

Yes, but I'm guessing it's more of a GitHub issue than Argos'?

sidharthv96 avatar Apr 12 '25 10:04 sidharthv96

Hello, we seem to also be having this issue. It does look like more of a GitHub issue but it is hampering our workflow as it happens reliably. Do you have any idea for possible workarounds?

ArxClaeyAi avatar Jun 24 '25 13:06 ArxClaeyAi

Hello, we seem to also be having this issue. It does look like more of a GitHub issue but it is hampering our workflow as it happens reliably. Do you have any idea for possible workarounds?

Hello, yeah I believe that's GitHub. I think it considers the job as pending sometimes. I will make a fix, let me know if it's better or not.

gregberge avatar Jul 31 '25 22:07 gregberge

Fix is released, let me know if it's better or not @sidharthv96 and @ArxClaeyAi please!

gregberge avatar Jul 31 '25 22:07 gregberge

Thanks @gregberge , will report if it appears again.

sidharthv96 avatar Aug 01 '25 06:08 sidharthv96