Help me make sense of this 403 error #26280

fiddlermikey · 2022-06-29T22:22:08Z

fiddlermikey
Jun 29, 2022

I think I’m running into a permissions issue but hoping someone can help shed light on this 403 error I’m getting. I have an action that takes an Organization and Repository Name as inputs and should pull the release artifact from the repo.

I have tried various combinations to try to narrow this down.

As a user, I can pull my own public and private repos
Transferred script to non-enterprise/SSO org
As a Org (non-enterprise/SSO) I can pull my public and private repos
Transferred action/workflow to Org using SSO
Added personal PAN with full access and copied the key to a secret at the SSO Org level
As SSO Org I can pull my user’s public repos
As SSO Org I get 403 error when trying to pull a public repo owned by the SSO Org

I find tables helpful, so I made one:

Script owner	Target Repo Owner	Repo Visibility	Result
User	User	Private	Ok
UserOrg	UserOrg	Private	Ok
UserEntOrg	User	Public	Ok
UserEntOrg	UserEntOrg	Public	403 Error

Can anyone help me understand what needs to be updated? Is it the repo or action that is failing authorization? How do I track that down?

Answered by fiddlermikey

Jun 30, 2022

I found the github-api-key was the problem, at least for public repos. Our company uses an Enterprise Account and it seems to be a required parameter in my case. I still cannot download from private repos. Is this by design?

View full answer

fiddlermikey · 2022-06-29T22:45:19Z

fiddlermikey
Jun 29, 2022
Author

I should have mentioned that the workflow uses the robinraju/release-downloader@v1.4

The workflow file is pretty basic:

on: workflow_dispatch: inputs: org: description: 'Project to sign' default: 'fiddlermikey' required: true repo: description: 'Project to sign' default: 'integ-testing' required: true jobs: runs-on: windows-latest steps: - name: Download Release Asset uses: robinraju/release-downloader@v1.4 with: repository: "${{ github.event.inputs.org }}/${{ github.event.inputs.repo }}" token: ${{ secrets.TEST_PRIVATEACCESS }} # Org-level secret defined using personal PAN latest: true fileName: "*.zip"

0 replies

fiddlermikey · 2022-06-30T05:57:49Z

fiddlermikey
Jun 30, 2022
Author

I found the github-api-key was the problem, at least for public repos. Our company uses an Enterprise Account and it seems to be a required parameter in my case. I still cannot download from private repos. Is this by design?

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

GitHub Community

Help me make sense of this 403 error #26280

{{title}}

Replies: 2 comments

{{title}}

{{title}}

Select a reply

GitHub Community

Help me make sense of this 403 error #26280

fiddlermikey Jun 29, 2022

Replies: 2 comments

fiddlermikey Jun 29, 2022 Author

fiddlermikey Jun 30, 2022 Author

fiddlermikey
Jun 29, 2022

fiddlermikey
Jun 29, 2022
Author

fiddlermikey
Jun 30, 2022
Author