graphql error: Resource not accessible by integration

[ssbarnea]

While trying to use this action I got into an error which seems bit unclear graphql error: Resource not accessible by integration, full log https://github.com/ansible/ansible-lint/runs/6450547152?check_suite_focus=true

My implementation is quite simple: https://github.com/ansible/ansible-lint/blob/main/.github/workflows/tox.yml#L260-L266 and as seen that is triggered by pull requests.

I supposed that the reason for getting this error is lack of permissions for adding a comment to a pull request? The README does not mention anything about such limitation.

Should I add a custom token, if so which permissions do I need to give it? That is bit problematic on pull request due to security concerns of leaking that token as I might not be able to use a secrets environment as pull request can be received from forks too.

References:

• https://github.community/t/message-resource-not-accessible-by-integration/176887

[ssbarnea]

A searchon https://sourcegraph.com/search?q=context:global+file:yml+uses:+sourcegraph/codenotify%40&patternType=literal shows that very few (13) repositories are using codenotify and most of them use a custom token.

Can we please get a confirmation that this is required? That should allow updating the docs.

@nicksnyder Any chance you can provide some insights here?

[nicksnyder]

I took a look at this and how action tokens/permissions have changed since I originally wrote this. I know what is going on here and will propose a docs update.

[nicksnyder]

I updated the docs in #23 and proposed a fix to ansible-lint in ansible/ansible-lint#2231

Going to mark this as closed since I think this issue is addressed from a docs perspective, but if not feel free to comment here or on the ansible-lint PR.