Improve error message on workflow file changes

[korthout]

Improve error message on workflow file changes

[korthout]

@macmiranda The default GITHUB_TOKEN used to push the commit has limited permissions. It does not allow to make changes to workflow files.

As a workaround, you can use a Personal Access Token with the workflow scope instead of the default GITHUB_TOKEN as the token input for the checkout action step.

Here's an example.

[macmiranda]

Yes, the workaround worked fine. I don't like using PATs though, especially the classic ones, they are overly powerful. It also doesn't make sense to have a PAT for a repo under an organization because the person could leave the company at any time and then the PAT is worthless (we use an automation user for that, but it takes a paid seat of the organization 😞)

Anyway, cool GitHub action. Thanks for sharing it.

Looking forward to a solution for #39

It would also be cool if there was an option to merge the backported commit directly, without the PR.

[macmiranda]

Hey @korthout hitting the exact same issue. Would you know what's the actual reason for this?

[macmiranda]

Thanks. It's a shame we can't just add the capability to the runner token

[korthout]

Absolutely agree. I guess GitHub sees a vulnerability, but it doesn't really apply to backport-action as it only deals with merged pull requests.

Let me know whether the workaround works for you, and I'd love to hear any other feedback on the action by the way. 🙇