Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update maven-dependency-submission-action to address permission issues #9

Open
wants to merge 4 commits into
base: main
Choose a base branch
from

Conversation

iQuxLE
Copy link
Collaborator

@iQuxLE iQuxLE commented Apr 29, 2024

For #8

Token Permissions:
By explicitly specifying the repo-token: ${{secrets.GITHUB_TOKEN }} in the workflow, we are ensuring that the action uses a token that GitHub automatically generates for actions. This token should have permissions aligned with the GitHub repository's current policies. The update doesn’t necessarily change the permissions but clarifies which token is being used, ensuring there is no ambiguity that could lead to permissions errors.

Addressing Potential Configuration Issues: 
The change might not directly adjust permissions (since I don’t have access to the settings), but it ensures that the action is correctly configured according to the latest standards. If there was any misconfiguration leading to the HTTP 403 error, correcting the action version and ensuring the correct use of tokens might resolve these issues.
@iQuxLE
Copy link
Collaborator Author

iQuxLE commented Apr 29, 2024

@julesjacobsen
Could you please verify that the GITHUB_TOKEN used in the workflow has the necessary permissions, especially for writing or accessing the dependency graph?
Please check if there are any restrictions set against third-party actions that might prevent them from performing operations like updating the dependency graph. Adjusting these, might resolve the permission issues.

I think if that is working, than #7 should stop failing

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant