refusing to allow a GitHub App to create or update workflow `.github/workflows/rating-chart.yml` without `workflows` permission about add-and-commit HOT 5 CLOSED

Found the issue !! I was doing using actions/checkout to pull the repo. It was using the default GITHUB_TOKEN. Changed it to use my personal token with workflows scope as well ... worked seamlessly ... only interesting thing is that now in every run my wf file is getting updated which in turn is triggering another run .. in an endless loop xD. Not sure how I can prevent this :)

from add-and-commit.

@sciencepal Happy to hear that ;)
Regarding the endless loop: I think the easiest way to prevent it is to exclude the workflow itself and the README file from the push event path:

on:
  push:
    paths-ignore:
      - README.md
      - .github/workflows/rating-chart.yml

If that doesn't work for you you'll need to find a way to detect whether the change has been made by the action...

from add-and-commit.

Thanks. Let me look into this. Will revert if I find a solution.

from add-and-commit.

Thanks @EndBug . That actually worked. Now I can randomize the cron interval to schedule runs any time. Awesome !!

from add-and-commit.

Hi, I have no idea on how to solve this. I think that it might be an issue caused by the fact that the action doesn't authenticate as an OAuth app (?)

I know for a fact that OAuth apps can have the workflow permission (I use it with gitpod), but I don't know how GitHub classifies action runs. The only sure thing is that GitHub knows when a commit is made by GitHub actions, since they can't trigger a second workflow run, so maybe they're also preventing them from editing workflows. I don't know, these are just theories.

from add-and-commit.