ossf / scorecard

OpenSSF Scorecard - Security health metrics for Open Source
https://scorecard.dev
Apache License 2.0
4.62k stars 503 forks source link

BUG: CI-Tests and SAST internal error for private repository, full permissions granted #4307

Open byangtri opened 3 months ago

byangtri commented 3 months ago

Describe the bug An error occurs indicating that the fine-grained personal access token does not have access to the required resources for CI-Tests check in private github repository, not encountering error with any other checks besides SAST as well

RESULTS
-------
Writing results to result
Error: check runtime error: CI-Tests: internal error: internal error: Client.Repositories.ListCheckRunsForRef: error during graphqlHandler.setupCheckRuns: Resource not accessible by personal access token
2024/08/21 11:24:41 error during command execution: check runtime error: CI-Tests: internal error: internal error: Client.Repositories.ListCheckRunsForRef: error during graphqlHandler.setupCheckRuns: Resource not accessible by personal access token

Reproduction steps Steps to reproduce the behavior:

  1. Execute the command scorecard --repo <github repository> --show-details --checks CI-Tests

Expected behavior scorecard command should complete successfully and generate result without encountering any errors related to access permissions

Additional context

image