Error on PRs from Forks: "unexpected error encounterd: Resource not accessible by integration"

[robearlam]

We're getting errors when the step runs against PR's issued from Forks. This works fine for PR's from branches in the same repo.

Step we're using is:

      - name: start deployment
        uses: bobheadxi/[email protected]
        id: deployment
        with:
          step: start
          token: ${{ secrets.GITHUB_TOKEN }}
          env: ${{ fromJSON('["Production", "Preview"]')[github.ref != 'refs/heads/main'] }} 

You can see an example here: https://github.com/Sitecore/developer-portal/pull/152/checks?check_run_id=3761659282

Seemed related to #32, but I added the fix from there to use the following permissions on the job but it didn't fix it:

permissions: 
  deployments: write

You can see our full GH action definition here: https://github.com/Sitecore/developer-portal/blob/main/.github/workflows/deploy.yml

Example of failed run: https://github.com/Sitecore/developer-portal/pull/152/checks?check_run_id=3761659282

[AhsanAyaz]

Yep. Facing the same issue
https://github.com/IOMechs/pure-css-loaders/runs/3932711230?check_suite_focus=true

[bobheadxi]

Interesting - I think this is definitely a GitHub auth issue. Have you tried providing a custom GITHUB_TOKEN?

[robearlam]

We're specifying token: ${{ secrets.GITHUB_TOKEN }} as you can see in the code above. Are you saying we need a different token?

[bobheadxi]

Yes, you might need to provide a different token - secrets.GITHUB_TOKEN is a default token provided by GitHub to Actions, and it can have funky permissions sometimes

For example:

token: ${{ secrets.CUSTOM_GITHUB_TOKEN }}

[bobheadxi]

@robearlam did switching to another token resolve your issue?

[bobheadxi]

I took a look at https://github.com/Sitecore/developer-portal/actions/workflows/deploy.yml and it seems everything is well - closing this issue for now, please let me know if you have any more questions!