fix: add org project token support for weekly reports #189
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
The default GITHUB_TOKEN does not have access to organization-level projects. Update workflow to use ORG_PROJECT_TOKEN repository secret if available, with fallback to GITHUB_TOKEN. Add documentation explaining how to set up the required PAT with proper scopes (read:org, read:project, write:discussion, repo) for accessing organization projects and posting to discussions. Also add .gitignore to prevent node_modules and .goose from being committed. Assisted-by: Claude 3.5 Sonnet via GitHub Copilot
dosubot
bot
added
the
size:S
dosubot
bot
added
area/dx
Remove PAT requirement and use built-in GITHUB_TOKEN like other workflows in this repository. The default GITHUB_TOKEN should have sufficient permissions for reading organization projects and writing to discussions. Assisted-by: Claude 3.5 Sonnet via GitHub Copilot
dosubot
bot
added
size:XS
Contributor
Author
|
Closing: Changes already merged in #187. The workflow already uses secrets.GITHUB_TOKEN. Will test the existing implementation directly. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Problem
The workflow from #187 fails because the default
GITHUB_TOKENdoesn't have permission to access organization-level project boards.Solution
ORG_PROJECT_TOKENrepository secret if available, with fallback toGITHUB_TOKENread:org- Access organization projectsread:project- Read project board datawrite:discussion- Post to discussionsrepo- Access repository data.gitignoreto preventnode_modulesand.goosefrom being committedSetup Instructions
An admin needs to:
ORG_PROJECT_TOKENTesting
Tested locally with
gh auth token- script successfully:Related: #166