Workflows triggered by Dependabot PRs will run with read-only permissions

Question

AnimMouse opened this issue 4 years ago · 7 comments

Create release is failing on pull requests that creates pre-releases.
Error: Resource not accessible by integration

Update: Resource not accessible by integration is not caused by create-release getting unmaintained by itself, it is caused by GitHub Actions: Workflows triggered by Dependabot PRs will run with read-only permissions. The problem still exist even in maintained actions.

Answer 1 · 2021-03-28T04:42:02.000Z

actions/create-release is now unmaintained.
Will need to use either of these:

Answer 2 · 2021-04-01T04:14:11.000Z

upload-release-asset is also unmaintained.
Will need to use either of these:

Answer 3 · 2021-04-03T16:18:26.000Z

Answer 4 · 2021-04-04T11:37:26.000Z

Answer 5 · 2021-04-10T08:14:39.000Z

Update: Resource not accessible by integration is not caused by create-release getting unmaintained by itself, it is caused by GitHub Actions: Workflows triggered by Dependabot PRs will run with read-only permissions. The problem still exist even in maintained actions.

Answer 6 · 2021-04-11T06:17:44.000Z

Fix implemented at 6c49b7a by using pull_request_target.

Answer 7 · 2021-04-13T07:09:16.000Z

Confirmed working.