Skip to content

ci: use AUTOMATION_TOKEN for robot-framework update#885

Merged
henrirosten merged 1 commit intomainfrom
pr-push-blocked-with-github-token
Feb 17, 2026
Merged

ci: use AUTOMATION_TOKEN for robot-framework update#885
henrirosten merged 1 commit intomainfrom
pr-push-blocked-with-github-token

Conversation

@henrirosten
Copy link
Collaborator

@henrirosten henrirosten commented Feb 17, 2026

The scheduled workflow that updates flake.lock failed at PR creation in its first nightly run. The reason is, GITHUB_TOKEN is governed by the repository/org Actions policy “Allow GitHub Actions to create and approve pull requests”. In tiiuae organization, that setting is locked off, so calls from GITHUB_TOKEN to create/update PRs are blocked with: GitHub Actions is not permitted to create or approve pull requests.

Using AUTOMATION_TOKEN (fine-grained PAT) authenticates as a separate principal and is not blocked by that specific Actions toggle, so branch push + PR creation can proceed.

Tested in this run: https://github.com/tiiuae/ghaf-infra/actions/runs/22089303773/job/63830626190, which pushed the PR: #887.

Signed-off-by: Henri Rosten <henri.rosten@unikie.com>
@henrirosten henrirosten marked this pull request as ready for review February 17, 2026 06:39
@henrirosten henrirosten requested a review from a team February 17, 2026 06:39
@henrirosten henrirosten merged commit bc0ce83 into main Feb 17, 2026
13 checks passed
@henrirosten henrirosten deleted the pr-push-blocked-with-github-token branch February 18, 2026 10:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants