comrak icon indicating copy to clipboard operation
comrak copied to clipboard

Benchmark PR job failing due to permissions

Open kivikakk opened this issue 1 year ago • 2 comments

See e.g. https://github.com/kivikakk/comrak/actions/runs/5958432069/job/16162659993?pr=337.

Run mshick/add-pr-comment@v2
  with:
    message-path: bench-output.md
    message-id: add-pr-comment
    refresh-message-position: false
    repo-owner: kivikakk
    repo-name: comrak
    repo-token: ***
    allow-repeats: false
    status: success
  env:
    CARGO_INCREMENTAL: 0
    CARGO_TERM_COLOR: always
Error: Resource not accessible by integration

This "Resource not accessible by integration" message has been coming up on a few projects lately where it didn't before; looks like Actions has changed their permissions model a bit.

kivikakk avatar Aug 29 '23 01:08 kivikakk

In particular it looks like a PR from a fork doesn't have the correct permissions.

https://github.com/mshick/add-pr-comment/issues/67 and https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token

digitalmoksha avatar Sep 30 '23 18:09 digitalmoksha

Possible solution: https://github.com/mshick/add-pr-comment#proxy-for-fork-based-prs

kivikakk avatar Mar 27 '24 05:03 kivikakk