HTTP Error 403 with auto-update TP workflow

[mickaelistria]

See https://github.com/eclipse-wildwebdeveloper/wildwebdeveloper/actions/runs/16382740338/job/46297230912

  /usr/bin/git push --force-with-lease origin update_target:refs/heads/update_target
  remote: Permission to eclipse-wildwebdeveloper/wildwebdeveloper.git denied to github-actions[bot].
  fatal: unable to access 'https://github.com/eclipse-wildwebdeveloper/wildwebdeveloper/': The requested URL returned error: 403
  Error: The process '/usr/bin/git' failed with exit code 128

[mickaelistria]

@laeubi since you've contributed to this file, maybe you have some hint to share regarding such error?

[laeubi]

You currently use the github token here:

wildwebdeveloper/.github/workflows/updateTarget.yml

Line 25 in 863944e

token: ${{ secrets.GITHUB_TOKEN }}

I assume one would need a PAT for the bot with write access to the repository, or enable additional rights for the workflow see

https://github.com/marketplace/actions/create-pull-request#token

[vrubezhny]

@mickaelistria Some time ago I saw a number of warning on our GH actions regarding the absent request for permissions...

Does adding something like:

...
permissions:
  contents: write

jobs:
...

fixes the issue?

[mickaelistria]

@vrubezhny Can you try this?

[vrubezhny]

Doesn't work fully yet... The error still happens but its description now is:

1 error
update / update
GitHub Actions is not permitted to create or approve pull requests. - https://docs.github.com/rest/pulls/pulls#create-a-pull-request

I've created a PR thttps://github.com/eclipse-wildwebdeveloper/.eclipsefdn/pull/8 that should allow workflows to create PRs, but it's waiting for the "code owner" to approve:

Merging is blocked
Waiting on code owner review from eclipse-wildwebdeveloper/eclipsefdn-security. 

@mickaelistria do you have approval rights at https://github.com/eclipse-wildwebdeveloper/.eclipsefdn ?

[mickaelistria]

Merged otterdog PR and things are now working as expected (see #1890 ). Thanks!