Skip to main content

Posts

Showing posts with the label GitHub Actions

Fixing GitHub Actions "Resource not accessible by integration" in Protected Branches

  If you are maintaining a repository with strict security defaults or branch protection rules, you have likely encountered this error log during a release pipeline or a PR automation step: HttpError: Resource not accessible by integration at /home/runner/work/.../index.js:14:10 ... status: 403 This 403 Forbidden error is the standard response when the ephemeral  GITHUB_TOKEN  attempts a write operation (creating a release, tagging a commit, or commenting on a PR) but lacks the specific OAuth scope required to execute it. The Root Cause: Least Privilege Defaults Historically, the auto-generated  GITHUB_TOKEN  provided to workflows had  read  and  write  access to almost all scopes by default. This was convenient but presented a massive surface area for supply chain attacks. If a third-party action was compromised, it could wipe your repository. GitHub updated the default setting for new organizations and repositories to  Rest...