question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

refusing to allow a GitHub App to create or update workflow `.github/workflows/rating-chart.yml` without `workflows` permission

See original GitHub issue

Thanks for the repo. I am using this to add and commit my README.md using workflows … I am able to successfully commit and push README.md however, I am not able to push workflows YAML file which fails with a permission issue, even though commit and add works fine here. The issue is :

! [remote rejected] master -> master (refusing to allow a GitHub App to create or update workflow .github/workflows/rating-chart.yml without workflows permission)

I have tried adding a secret environment variable of a new token with workflow scope as well. There seems to be no improvement (I am guessing workflow scope in a token vs workflow permission are two separate things, but I may be wrong)

Can you let me know how this can be resolved. Here is my repo - https://github.com/sciencepal/sciencepal Here is a sample workflow (Check internal logs of add-and-commit job step) - https://github.com/sciencepal/sciencepal/runs/984418665

Issue Analytics

  • State:closed
  • Created 3 years ago
  • Reactions:1
  • Comments:5 (2 by maintainers)

github_iconTop GitHub Comments

3reactions
sciencepalcommented, Aug 15, 2020

Found the issue !! I was doing using actions/checkout to pull the repo. It was using the default GITHUB_TOKEN. Changed it to use my personal token with workflows scope as well … worked seamlessly … only interesting thing is that now in every run my wf file is getting updated which in turn is triggering another run … in an endless loop xD. Not sure how I can prevent this 😃

2reactions
EndBugcommented, Aug 15, 2020

@sciencepal Happy to hear that 😉 Regarding the endless loop: I think the easiest way to prevent it is to exclude the workflow itself and the README file from the push event path:

on:
  push:
    paths-ignore:
      - README.md
      - .github/workflows/rating-chart.yml

If that doesn’t work for you you’ll need to find a way to detect whether the change has been made by the action…

Read more comments on GitHub >

github_iconTop Results From Across the Web

Refusing to allow a GitHub App to create or update workflow ...
Hi! I currently want to create a workflow to update another workflow scheduled (see the corresponding workflow). It creates a new branch, makes...
Read more >
refusing to allow a GitHub App to create or update workflow
This is so that GitHub Apps you've added to your repository can't access the secrets in your repository without your permission.
Read more >
Github workflow permission - Atlassian Community
Does Sourcetree ask for Github workflow permission during OAuth? ... Staging (refusing to allow an OAuth App to create or update workflow ......
Read more >
Christopher Simpson - Karma Computing
[remote rejected] (refusing to allow an OAuth App to create or update workflow `.github/workflows/...` without `workflow` scope) ...
Read more >
Can't push to GitHub "Refusing to allow an OAuth App to ...
When any of your commits contain a new or updated GitHub Action, ... allow an OAuth App to create or update workflow without...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found