synopsys-sig / detect-action

Apache License 2.0
28 stars 29 forks source link

Configuration of github-token #52

Open berndschatz opened 1 year ago

berndschatz commented 1 year ago

I have created a github token called GITHUB_TOCKEN_BLACK_DUCK and wanted it to use it in my actions with:

with:
          github-token: ${{ secrets.GITHUB_TOKEN_BLACK_DUCK }}

The action failed always with: HttpError: You must authenticate via a GitHub App.

If i understand it correctly, every workflow run creates/updates the secret GITHUB_TOKEN and your action only works if you configure it with this token:

with:
          github-token: ${{ secrets.GITHUB_TOKEN }}

If you can use it only this way, you should not make it configurable and implement it hard-coded.

cariad-robert-abel commented 1 year ago

Thanks a bunch for raising this issue! I ran into the same problem and Synopsys' documentation is no help at all.