Skip to content

Fix missing token error in GitHub Actions #6409

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 6 commits into from
Jul 7, 2022
Merged

Conversation

maneesht
Copy link
Contributor

@maneesht maneesht commented Jul 3, 2022

Workflows created by forked repositories are failing with the error Error: Input required and not supplied: token.

In our actions we use secrets.OSS_BOT_GITHUB_TOKEN which is valid for PRs created from the same repository, however, secrets are not passed to forked repos, as mentioned here, causing the actions to fail on forked repositories. We should instead be using the passed token github.token

@changeset-bot
Copy link

changeset-bot bot commented Jul 3, 2022

⚠️ No Changeset found

Latest commit: 565a171

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@maneesht maneesht changed the title Potentially fix token error in GitHub Actions Fix missing token error in GitHub Actions Jul 4, 2022
@maneesht maneesht marked this pull request as ready for review July 4, 2022 00:11
github_token: ${{ secrets.OSS_BOT_GITHUB_TOKEN || github.token }}
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The reason we use the OSS_BOT_GITHUB_TOKEN here is that if you use the built-in github token, the result of this workflow will not trigger any other workflows. (https://docs.github.com/en/actions/using-workflows/triggering-a-workflow#triggering-a-workflow-from-a-workflow) This workflow is intended to trigger assign-tech-writers.yml which is why Fei ended up switching to this token.

This isn't the most critical workflow and we can probably risk the tech writers not automatically being added in some cases if it's not frequent. If this (a fork) is the standard workflow then we probably need to think of another solution.

Another possibility is to not assign tech writers in a separate workflow but as an additional step at the end of this one. I'm not sure why Fei originally didn't do that, but my guess is that he wanted the label to always trigger assigning tech writers, even if the label is added manually. I figure if you are consciously assigning the label manually, you probably will remember to add the tech writer. I think this might be the way to go?

Copy link
Contributor

@hsubox76 hsubox76 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks!

Copy link
Contributor

@dwyfrequency dwyfrequency left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@maneesht maneesht merged commit a6dc377 into firebase:master Jul 7, 2022
@firebase firebase locked and limited conversation to collaborators Aug 7, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants