actions-rs / audit-check

🛡️ GitHub Action for security audits
https://github.com/marketplace/actions/rust-audit-check
MIT License
170 stars 39 forks source link

Error: Resource not accessible by integration #222

Closed MTRNord closed 2 years ago

MTRNord commented 2 years ago

Do the checklist before filing an issue:

Description

The action crashes with Error: Resource not accessible by integration when setting "Workflow permissions" to read only

Workflow code

name: Security audit
on:
  push:
    paths:
      - "**/Cargo.toml"
      - "**/Cargo.lock"
  pull_request:
  workflow_dispatch:
  schedule:
    - cron: "0 0 * * *"
jobs:
  audit:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v1
      - uses: Swatinem/rust-cache@v1
      - uses: actions-rs/audit-check@v1
        with:
          token: ${{ secrets.GITHUB_TOKEN }}

Action output

logs_122.zip

Expected behavior

It should fail. But the Readme should mention which permissions are required and why these are required

Additional context

This is probably just missing documentation :)

MTRNord commented 2 years ago

Seems like this is actually a dup of #218 Sorry :)