[Bug]: CI: Failed to add/update comment to PR: HttpError: Resource not accessible by integration

[wood3n]

Version

web-infra-dev/rsdoctor-action@main

In github actions

Details

May I ask if special permissions are required when executing in github actions? I have already given workflow write permission, but someone forked my repository and can't create comment after submitting the PR.

Reproduce link

https://github.com/wood3n/biu/actions/runs/19785429009/job/56691207813

Reproduce Steps

This is my action's configuration

name: Web Analysis

on:
  pull_request:
    types: [opened, synchronize, reopened, closed]

permissions:
  contents: write
  issues: write
  pull-requests: write

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  changes:
    name: Detect Core Changes
    runs-on: ubuntu-latest
    outputs:
      core: ${{ steps.filter.outputs.core }}
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: Paths Filter
        id: filter
        uses: dorny/paths-filter@v3
        with:
          filters: |
            core:
              - 'src/**'
              - 'rsbuild.config.ts'
              - 'package.json'
              - 'pnpm-lock.yaml'
              - '.nvmrc'
              - 'tsconfig.json'

  build:
    needs: changes
    if: ${{ needs.changes.outputs.core == 'true' }}
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Setup Pnpm
        uses: pnpm/action-setup@v4

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version-file: ".nvmrc"
          cache: "pnpm"

      - name: Configure Git to use HTTPS instead of SSH
        run: git config --global url."https://github.com/".insteadOf "git@github.com:"

      - name: Install Dependencies
        run: pnpm install --frozen-lockfile
        env:
          HUSKY: 0

      - name: Build Web Resources
        run: pnpm build:web

      - name: Bundle Analysis
        uses: web-infra-dev/rsdoctor-action@main
        with:
          file_path: "dist/web/rsdoctor-data.json"
          target_branch: "master"

[yifancong]

The cause of this error is that a PR from a forked repository doesn't have permission to post comments on the base repository. I will handle this case gracefully, but it won't be possible to show the diff comment on the PR page. You can still see the results on the diff CI summary page.

If you want the diff to be displayed in the base repository, you need to use a personal access token, and the base repository must allow that personal token to post comments. I'll add this to the documentation later — note that using a personal token also carries some risks.

[wood3n]

@yifancong Thank you, but this action does not seem to expose the params of the custom github token, so what should I do?

[yifancong]

I will optimize here, but it is estimated that it will take next week. I'm doing other things now.