You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
It seems that my GITHUB_TOKEN permissions is not working as expected.
I have a feature branch where I'm adding a few missing permissions to the github-token.
But as you can see, the token permission set on the workflow is different from the permissions listed on Set up job logs. The missing permissions are precisely the ones being added by the feature branch.
name: Workflowpermissions:
contents: writepull-requests: writeactions: readchecks: write # Added by feature branchid-token: write # Added by feature branchon:
pull_request_target:
branches:
- main
Logs:
Because the trigger is pull_request_target, I expect the changes take effect "immediately" (meaning, changes don't need to be merged to the default branch).
Am I missing something? The job is running on a self-hosted runner.
BugSomething isn't working correctlyActionsBuild, test, and automate your deployment pipeline with world-class CI/CD
1 participant
Heading
Bold
Italic
Quote
Code
Link
Numbered list
Unordered list
Task list
Attach files
Mention
Reference
Menu
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
-
Select Topic Area
Bug
Body
Hello,
It seems that my
GITHUB_TOKEN
permissions is not working as expected.I have a feature branch where I'm adding a few missing permissions to the github-token.
But as you can see, the token permission set on the workflow is different from the permissions listed on
Set up job
logs. The missing permissions are precisely the ones being added by the feature branch.Logs:
Because the trigger is
pull_request_target
, I expect the changes take effect "immediately" (meaning, changes don't need to be merged to the default branch).Am I missing something? The job is running on a self-hosted runner.
Beta Was this translation helpful? Give feedback.
All reactions