Permission denied errors with github repo references in transitive deps

Open JustinBeckwith opened this issue 1 year ago • 1 comments

I am trying to use dependabot on our project which uses pnpm. For most PRs, everything works great. Specifically with dependabot PRs though ... we get the error referenced below. Here is an example run: https://github.com/discord/embedded-app-sdk/actions/runs/8651044410/job/23720870382?pr=115

It appears that this is specifically a problem with https://github.com/uNetworking/uWebSockets.js, which is not available on npm. The package https://www.npmjs.com/package/@colyseus/uwebsockets-transport pulls it in as a dependency using a relative github path: https://github.com/colyseus/colyseus/blob/master/packages/transport/uwebsockets-transport/package.json#L10

At first I thought it was an issue with PRs from accounts that don't have write access ... but we have PRs from other external contributors where CI appears to work fine. What in the world is going on here 😆

Progress: resolved 1109, reused 0, downloaded 223, added 216
 ERROR  Command failed with exit code [12](https://github.com/discord/embedded-app-sdk/actions/runs/8651044410/job/23720870382?pr=115#step:5:13)8: /usr/bin/git clone [email protected]:uNetworking/uWebSockets.js.git /home/runner/setup-pnpm/node_modules/.bin/store/v3/tmp/_tmp_1813_28694926017d535a86eb55866da40083
Cloning into '/home/runner/setup-pnpm/node_modules/.bin/store/v3/tmp/_tmp_18[13](https://github.com/discord/embedded-app-sdk/actions/runs/8651044410/job/23720870382?pr=115#step:5:14)_28694926017d535a86eb55866da40083'...
[email protected]: Permission denied (publickey).
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.

pnpm: Command failed with exit code 128: /usr/bin/git clone [email protected]:uNetworking/uWebSockets.js.git /home/runner/setup-pnpm/node_modules/.bin/store/v3/tmp/_tmp_1813_28694926017d535a86eb55866da40083
Cloning into '/home/runner/setup-pnpm/node_modules/.bin/store/v3/tmp/_tmp_1813_28694926017d535a86eb55866da40083'...
[email protected]: Permission denied (publickey).
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.
    at makeError (/home/runner/setup-pnpm/node_modules/.pnpm/pnpm@8.[15](https://github.com/discord/embedded-app-sdk/actions/runs/8651044410/job/23720870382?pr=115#step:5:16).6/node_modules/pnpm/dist/pnpm.cjs:27828:17)
    at handlePromise (/home/runner/setup-pnpm/node_modules/.pnpm/[email protected]/node_modules/pnpm/dist/pnpm.cjs:28399:33)
    at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
    at async gitFetcher (/home/runner/setup-pnpm/node_modules/.pnpm/[email protected]/node_modules/pnpm/dist/pnpm.cjs:117537:11)
    at async fetcher (/home/runner/setup-pnpm/node_modules/.pnpm/[email protected]/node_modules/pnpm/dist/pnpm.cjs:130171:[16](https://github.com/discord/embedded-app-sdk/actions/runs/8651044410/job/23720870382?pr=115#step:5:17))
    at async run (/home/runner/setup-pnpm/node_modules/.pnpm/[email protected]/node_modules/pnpm/dist/pnpm.cjs:129636:23)

Apr 12 '24 02:04 JustinBeckwith

This may be a duplicate of https://github.com/npm/cli/issues/2610, if you're using any of the same underlying libraries 🤔

Apr 15 '24 15:04 JustinBeckwith