chore: temporary GITHUB_TOKEN write-permission diagnostic#1325
Open
davidacevedo wants to merge 6 commits into
Open
chore: temporary GITHUB_TOKEN write-permission diagnostic#1325davidacevedo wants to merge 6 commits into
davidacevedo wants to merge 6 commits into
Conversation
Probes branch-ref, tag-ref, and release creation in isolation with the default GITHUB_TOKEN to determine which write the token is denied. Each probe is independent and self-cleaning. Temporary; remove after diagnosis.
Contributor
|
Released prerelease version |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Temporary diagnostic to isolate why
release-pleasegetsResource not accessible by integrationwhen creating a release.It probes three writes with the default
GITHUB_TOKEN(same context as the release job), each independent and self-cleaning:refs/heads/…) — control; PRs already prove this worksrefs/tags/…) — direct tag creationrepos.createRelease, auto-creates a tag) — the exact call release-please makesWhichever 403s isolates branch-vs-tag-vs-release. Results print in the job log and the run summary. Do not merge — close after we read the results.