Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

BUG: CI-Tests and SAST internal error for private repository, full permissions granted #4307

Open
byangtri opened this issue Aug 21, 2024 · 0 comments
Labels
kind/bug Something isn't working

Comments

@byangtri
Copy link

byangtri commented Aug 21, 2024

Describe the bug
An error occurs indicating that the fine-grained personal access token does not have access to the required resources for CI-Tests check in private github repository, not encountering error with any other checks besides SAST as well

RESULTS
-------
Writing results to result
Error: check runtime error: CI-Tests: internal error: internal error: Client.Repositories.ListCheckRunsForRef: error during graphqlHandler.setupCheckRuns: Resource not accessible by personal access token
2024/08/21 11:24:41 error during command execution: check runtime error: CI-Tests: internal error: internal error: Client.Repositories.ListCheckRunsForRef: error during graphqlHandler.setupCheckRuns: Resource not accessible by personal access token

Reproduction steps
Steps to reproduce the behavior:

  1. Execute the command scorecard --repo <github repository> --show-details --checks CI-Tests

Expected behavior
scorecard command should complete successfully and generate result without encountering any errors related to access permissions

Additional context

  • Full read write access to repository permissions for fine-grained PAT still gives error
  • Other checks run successfully except SAST as well.
  • Not encountering issue when using classic token
  • Scorecard Version: 5.0.0

image

@byangtri byangtri added the kind/bug Something isn't working label Aug 21, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/bug Something isn't working
Projects
Status: No status
Development

No branches or pull requests

1 participant