github-action icon indicating copy to clipboard operation
github-action copied to clipboard

No PR Comment when there is PR from forked repo

Open ibakshay opened this issue 5 years ago • 7 comments

Hi,

The Pull Request comment is not posted from Coveralls when there is a PR from the forked repository. Could you please look into the issue ?

Thanks in advance.

ibakshay avatar Sep 27 '19 09:09 ibakshay

Same issue. Sample links:

  • Pull request: https://github.com/OSDKDev/Panner.Order/pull/25
  • Workflow run: https://github.com/OSDKDev/Panner.Order/pull/25/checks?check_run_id=291306416
  • Job created in coveralls: https://coveralls.io/jobs/55335661

Yet... no comment or check is posted to the pull request.

IOrlandoni avatar Nov 06 '19 17:11 IOrlandoni

@nickmerwin Any chance you could check this issue? It seems to me like a must-have for open source projects where work is done on forks and pull-requested in.

IOrlandoni avatar Nov 13 '19 02:11 IOrlandoni

@Dunning-Kruger @ibakshay This is likely due to the fact that the github token is read-only for forked pull requests. https://help.github.com/en/actions/automating-your-workflow-with-github-actions/authenticating-with-the-github_token#permissions-for-the-github_token

a-b-r-o-w-n avatar Nov 21 '19 23:11 a-b-r-o-w-n

@a-b-r-o-w-n Attempting to work-around this by creating a specific token and passing that to the action... do you know which permissions does coveralls require?

IOrlandoni avatar Nov 28 '19 20:11 IOrlandoni

Github will not share any user secrets for forked repos. ${{ secrets.GITHUB_TOKEN }} that is shared is a read-only token and cannot post PR comments. So there is no workaround as far as I know.

a-b-r-o-w-n avatar Dec 01 '19 23:12 a-b-r-o-w-n

I have the same problem, so this is the dead path right? But why travis can post back comment?

bitsf avatar Feb 11 '20 07:02 bitsf

So any open source projects using coveralls github actions cannot get their pull requests checked? Seems a big killer for me. Status check is stuck now

Can-Sahin avatar Apr 30 '20 18:04 Can-Sahin