github-starred/actual
2
0
Fork 0
mirror of https://github.com/actualbudget/actual.git synced 2026-11-12 03:42:19 -06:00
Code Issues 3.0k Packages Projects Releases 58 Wiki Activity

[PR #6349] Use ACTIONS_UPDATE_TOKEN for workflows that push to forks #20821

New Issue
Closed
opened 2026-04-14 21:46:15 -05:00 by GiteaMirror · 0 comments
GiteaMirror commented 2026-04-14 21:46:15 -05:00
Owner
Copy Link
Copy Source

Original Pull Request: https://github.com/actualbudget/actual/pull/6349

State: closed
Merged: Yes

Summary

GITHUB_TOKEN doesn't have permission to push to fork branches in workflow_run and issue_comment triggered workflows. This PR switches to using a PAT stored as ACTIONS_UPDATE_TOKEN for workflows that need cross-fork push access.

Changes

  • VRT update workflow: Use ACTIONS_UPDATE_TOKEN for checkout token when pushing VRT screenshot updates to contributor fork branches
  • AI-generated release notes: Pass ACTIONS_UPDATE_TOKEN as environment variable when committing release notes files to PR branches

Notes

  • The ACTIONS_UPDATE_TOKEN secret must be configured in repository settings with appropriate permissions (contents: write)
  • Static analysis may show "Context access might be invalid" warnings for custom secrets - this is expected and informational only
**Original Pull Request:** https://github.com/actualbudget/actual/pull/6349 **State:** closed **Merged:** Yes --- ## Summary `GITHUB_TOKEN` doesn't have permission to push to fork branches in `workflow_run` and `issue_comment` triggered workflows. This PR switches to using a PAT stored as `ACTIONS_UPDATE_TOKEN` for workflows that need cross-fork push access. ## Changes - **VRT update workflow**: Use `ACTIONS_UPDATE_TOKEN` for checkout token when pushing VRT screenshot updates to contributor fork branches - **AI-generated release notes**: Pass `ACTIONS_UPDATE_TOKEN` as environment variable when committing release notes files to PR branches ## Notes - The `ACTIONS_UPDATE_TOKEN` secret must be configured in repository settings with appropriate permissions (`contents: write`) - Static analysis may show "Context access might be invalid" warnings for custom secrets - this is expected and informational only
GiteaMirror added the pull-request label 2026-04-14 21:46:15 -05:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
AI generated
API
bank sync
budgeting
bug
can’t replicate
dependencies
docker
documentation
electron
experimental feature
feature
feedback
goal templates
good first issue
help wanted
importers
maintenance
needs info
needs testing
needs triage
needs votes
openid
payees
pull-request
Mirrored from GitHub Pull Request
 regression
reports
responsive
rules
schedules
server
✨ merged
split transactions
tech debt
tech-support
theme
transaction import
transaction reconciliation
transactions
translations
upstream
user interface
✅ approved
wontfix
No labels pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
GiteaMirror ninjasurge (Kaehlen Rog)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/actual#20821