Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

GraphQL: Resource not accessible by integration (createRepository) #200

Open
notdodo opened this issue Jan 5, 2025 · 0 comments
Open

GraphQL: Resource not accessible by integration (createRepository) #200

notdodo opened this issue Jan 5, 2025 · 0 comments

Comments

@notdodo
Copy link

notdodo commented Jan 5, 2025

[...snip...]
  preview:
    name: Preview
    needs: python-ci
    runs-on: ubuntu-latest
    permissions:
      write-all # just for testing
      # contents: read
      # pull-requests: write
      # id-token: write
    steps:
      - uses: actions/create-github-app-token@c1a285145b9d317df6ced56c09f525b5c2b6f755
        # v1.11.1
        id: app-token
        with:
          app-id: ${{ vars.APP_ID }}
          private-key: ${{ secrets.APP_PRIVATE_KEY }}
          owner: ${{ github.repository_owner }}
      - run: |
          echo "Testing token..."
          gh repo create deleteme --public
          curl -H "Authorization: Bearer ${{ steps.app-token.outputs.token }}" \
              -H "Accept: application/vnd.github+json" \
              https://api.github.com/user/repos
        env:
          GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
          GH_TOKEN: ${{ steps.app-token.outputs.token }}
[...snip...]

I'm using the above workflow, in a public repository, to authenticate using a GitHub App for some automation (e.g. create a new repository).
When running the above workflow I get GraphQL: Resource not accessible by integration (createRepository):

2025-01-05T11:57:46.2553764Z Current runner version: '2.321.0'
2025-01-05T11:57:46.2581745Z ##[group]Operating System
2025-01-05T11:57:46.2582880Z Ubuntu
2025-01-05T11:57:46.2584002Z 24.04.1
2025-01-05T11:57:46.2584788Z LTS
2025-01-05T11:57:46.2585557Z ##[endgroup]
2025-01-05T11:57:46.2586415Z ##[group]Runner Image
2025-01-05T11:57:46.2587342Z Image: ubuntu-24.04
2025-01-05T11:57:46.2688593Z Version: 20241215.1.0
2025-01-05T11:57:46.2690066Z Included Software: https://github.com/actions/runner-images/blob/ubuntu24/20241215.1/images/ubuntu/Ubuntu2404-Readme.md
2025-01-05T11:57:46.2691864Z Image Release: https://github.com/actions/runner-images/releases/tag/ubuntu24%2F20241215.1
2025-01-05T11:57:46.2693198Z ##[endgroup]
2025-01-05T11:57:46.2693899Z ##[group]Runner Image Provisioner
2025-01-05T11:57:46.2694678Z 2.0.404.1
2025-01-05T11:57:46.2695322Z ##[endgroup]
2025-01-05T11:57:46.2698189Z ##[group]GITHUB_TOKEN Permissions
2025-01-05T11:57:46.2700581Z Actions: write
2025-01-05T11:57:46.2701442Z Attestations: write
2025-01-05T11:57:46.2702140Z Checks: write
2025-01-05T11:57:46.2702790Z Contents: write
2025-01-05T11:57:46.2703829Z Deployments: write
2025-01-05T11:57:46.2704520Z Discussions: write
2025-01-05T11:57:46.2705122Z Issues: write
2025-01-05T11:57:46.2705717Z Metadata: read
2025-01-05T11:57:46.2706319Z Packages: write
2025-01-05T11:57:46.2706927Z Pages: write
2025-01-05T11:57:46.2707512Z PullRequests: write
2025-01-05T11:57:46.2708152Z RepositoryProjects: write
2025-01-05T11:57:46.2708817Z SecurityEvents: write
2025-01-05T11:57:46.2709442Z Statuses: write
2025-01-05T11:57:46.2710021Z ##[endgroup]
2025-01-05T11:57:46.2712582Z Secret source: Actions
2025-01-05T11:57:46.2713555Z Prepare workflow directory
2025-01-05T11:57:46.3018712Z Prepare all required actions
2025-01-05T11:57:46.3055285Z Getting action download info
2025-01-05T11:57:46.5241936Z Download action repository 'actions/create-github-app-token@c1a285145b9d317df6ced56c09f525b5c2b6f755' (SHA:c1a285145b9d317df6ced56c09f525b5c2b6f755)
2025-01-05T11:57:46.7512008Z Download action repository 'actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683' (SHA:11bd71901bbe5b1630ceea73d27597364c9af683)
2025-01-05T11:57:46.7873755Z Download action repository 'actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a' (SHA:6849a6489940f00c2f30c0fb92c6274307ccb58a)
2025-01-05T11:57:46.9477332Z Download action repository 'snok/install-poetry@76e04a911780d5b312d89783f7b1cd627778900a' (SHA:76e04a911780d5b312d89783f7b1cd627778900a)
2025-01-05T11:57:47.0873530Z Download action repository 'actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b' (SHA:0b93645e9fea7318ecaed2b359559ac225c90a2b)
2025-01-05T11:57:47.1666303Z Download action repository 'pulumi/auth-actions@80dec0d5e009a11565cbf87d9ef9103fc7d24198' (SHA:80dec0d5e009a11565cbf87d9ef9103fc7d24198)
2025-01-05T11:57:47.4059256Z Download action repository 'pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952' (SHA:c7fad9e2f0b79653172b36538b8b34b3c0291952)
2025-01-05T11:57:47.8164563Z Complete job name: Preview
2025-01-05T11:57:47.9038440Z ##[group]Run actions/create-github-app-token@c1a285145b9d317df6ced56c09f525b5c2b6f755
2025-01-05T11:57:47.9040830Z with:
2025-01-05T11:57:47.9041977Z   app-id: 1102592
2025-01-05T11:57:47.9070895Z   private-key: ***

2025-01-05T11:57:47.9072118Z   owner: notdodo
2025-01-05T11:57:47.9073593Z   github-api-url: https://api.github.com
2025-01-05T11:57:47.9075443Z ##[endgroup]
2025-01-05T11:57:48.0578016Z repositories not set, creating token for all repositories for given owner "notdodo"
2025-01-05T11:57:48.2954363Z ##[group]Run echo "Testing token..."
2025-01-05T11:57:48.2955970Z �[36;1mecho "Testing token..."�[0m
2025-01-05T11:57:48.2957524Z �[36;1mgh repo create deleteme --public�[0m
2025-01-05T11:57:48.2960205Z �[36;1mcurl -H "Authorization: ***" \�[0m
2025-01-05T11:57:48.2961885Z �[36;1m    -H "Accept: application/vnd.github+json" \�[0m
2025-01-05T11:57:48.2964032Z �[36;1m    https://api.github.com/user/repos�[0m
2025-01-05T11:57:48.3012101Z shell: /usr/bin/bash -e {0}
2025-01-05T11:57:48.3013629Z env:
2025-01-05T11:57:48.3015463Z   GITHUB_TOKEN: ***
2025-01-05T11:57:48.3016967Z   GH_TOKEN: ***
2025-01-05T11:57:48.3018041Z ##[endgroup]
2025-01-05T11:57:48.3121512Z Testing token...
2025-01-05T11:57:48.5356387Z GraphQL: Resource not accessible by integration (createRepository)
2025-01-05T11:57:48.5386445Z ##[error]Process completed with exit code 1.
2025-01-05T11:57:48.5563910Z Post job cleanup.
2025-01-05T11:57:48.7716941Z Token revoked
2025-01-05T11:57:48.8487640Z Cleaning up orphan processes

The GitHub application has all the Repository permissions and it's installed on my account with "All repositories" set.
Am I missing something?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant