Resource not accessible by integration - assigning author #25487

drpaneas · 2020-10-07T12:08:15Z

drpaneas
Oct 7, 2020

I am using https://github.com/marketplace/actions/auto-author-assign
and my workflow is:

name: 'Auto Author Assign'
on:
  pull_request:
    types: [opened, reopened]
jobs:
  add-assignees:
    runs-on: ubuntu-latest
    steps:
      - name: auto-author-assign
        uses: toshimaru/auto-author-assign@v1.1.2
        with:
          repo-token: "${{ secrets.GITHUB_TOKEN }}"

When there is a new PR, the action fails to assign the PR to the person who sent it. See for example: https://github.com/drpaneas/romie/pull/58/checks?check_run_id=1220186720

the error says:

Run toshimaru/auto-author-assign@v1.1.2
  with:
    repo-token: ***
Error: Resource not accessible by integration

Answered by kingthorin

Oct 7, 2020

You need to use pull_request_target to allow forks to have access to the token.

View full answer

kingthorin · 2020-10-07T12:11:55Z

kingthorin
Oct 7, 2020

You need to use pull_request_target to allow forks to have access to the token.

0 replies

drpaneas · 2020-10-07T12:49:53Z

drpaneas
Oct 7, 2020
Author

Thanks for your reply. Does that mean I need to create a personal access token?
EDIT: I’ve found this page https://github.com/actions/checkout/blob/05aa1e5bb412bf00f60524f433ec33689f14e2e5/README.md#Checkout-pull-request-on-pull_request_target

0 replies

airtower-luna · 2020-10-07T15:08:59Z

airtower-luna
Oct 7, 2020

No, a pull_request workflow from a fork won’t have access to the PAT secret either. A pull_request_target workflow does, and does get a GITHUB_TOKEN with write access. The idea is that the workflow for pull_request_target is already trusted code on the target branch, just make sure not to give any untrusted code from the pull request access to secrets or token.

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

GitHub Community

Resource not accessible by integration - assigning author #25487

{{title}}

Replies: 3 comments

{{title}}

{{title}}

{{title}}

Select a reply

GitHub Community

Resource not accessible by integration - assigning author #25487

drpaneas Oct 7, 2020

Replies: 3 comments

kingthorin Oct 7, 2020

drpaneas Oct 7, 2020 Author

airtower-luna Oct 7, 2020

drpaneas
Oct 7, 2020

kingthorin
Oct 7, 2020

drpaneas
Oct 7, 2020
Author

airtower-luna
Oct 7, 2020