Allow auto proto conversion in forks

Author: lucy66hw

.github/workflows/convert-proto.yml

@@ -28,6 +28,9 @@ on:
 jobs:
   auto-proto-convert:
     runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
     steps:
       - name: Checkout Repository
         uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
@@ -55,6 +58,12 @@ jobs:
             exit 1
           fi
 
+          # repository_dispatch currently supplies GitHub's artifact page URL. That
+          # URL is intended for browsers; use the REST API endpoint that returns the ZIP.
+          if [[ "$ARTIFACT_DOWNLOAD_URL" =~ ^https://github\.com/([^/]+)/([^/]+)/actions/runs/[0-9]+/artifacts/([0-9]+)/?$ ]]; then
+            ARTIFACT_DOWNLOAD_URL="https://api.github.com/repos/${BASH_REMATCH[1]}/${BASH_REMATCH[2]}/actions/artifacts/${BASH_REMATCH[3]}/zip"
+          fi
+
           echo "artifact_download_url=$ARTIFACT_DOWNLOAD_URL" >> "$GITHUB_OUTPUT"
           echo "source_commit=${API_SPEC_COMMIT:-unknown}" >> "$GITHUB_OUTPUT"
           echo "run_id=${API_SPEC_RUN_ID:-unknown}" >> "$GITHUB_OUTPUT"
@@ -63,7 +72,7 @@ jobs:
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          curl -L \
+          curl --fail --location --show-error \
             -H "Authorization: Bearer $GH_TOKEN" \
             -H "Accept: application/vnd.github+json" \
             -o api-spec-build.zip \