Skip to content

fix(ci): explicitly request contents:write permission for app token#355

Merged
skevetter merged 1 commit into
mainfrom
4db9-promote-verify
May 18, 2026
Merged

fix(ci): explicitly request contents:write permission for app token#355
skevetter merged 1 commit into
mainfrom
4db9-promote-verify

Conversation

@skevetter

Copy link
Copy Markdown
Contributor

Summary

  • The devsy-app installation has contents: write at the org level, but the generated token may not be getting the write scope
  • Adding permission-contents: write to actions/create-github-app-token@v3 explicitly requests that the installation token be scoped with contents write access
  • This may resolve the HTTP 403: Resource not accessible by integration error on the create stable release step

Add permission-contents:write to the create-github-app-token step to
ensure the generated token explicitly includes write access to contents
(including releases). The installation already has contents:write, but
explicitly scoping the token may resolve the 403 on release creation.
@netlify

netlify Bot commented May 18, 2026

Copy link
Copy Markdown

Deploy Preview for devsydev canceled.

Name Link
🔨 Latest commit b22437f
🔍 Latest deploy log https://app.netlify.com/projects/devsydev/deploys/6a0b691ddb12f00009fa2990

@coderabbitai

coderabbitai Bot commented May 18, 2026

Copy link
Copy Markdown

Warning

Rate limit exceeded

@skevetter has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 52 minutes and 46 seconds before requesting another review.

You’ve run out of usage credits. Purchase more in the billing tab.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 9a2aeb2a-8def-40d2-8060-0b4f8baa13ee

📥 Commits

Reviewing files that changed from the base of the PR and between 540e67a and b22437f.

📒 Files selected for processing (1)
  • .github/workflows/promote-release.yml

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@skevetter
skevetter merged commit ed11e14 into main May 18, 2026
16 checks passed
@skevetter
skevetter deleted the 4db9-promote-verify branch May 18, 2026 19:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant